Skip to content

Commit 711b49a

Browse files
committed
Add Default JWT Algorithms
1 parent 56bfaf4 commit 711b49a

File tree

1 file changed

+6
-2
lines changed
  • ansible_base/authentication/authenticator_plugins

1 file changed

+6
-2
lines changed

ansible_base/authentication/authenticator_plugins/oidc.py

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -123,8 +123,12 @@ class OpenIdConnectConfiguration(BaseAuthenticatorConfiguration):
123123
)
124124

125125
JWT_ALGORITHMS = ListField(
126-
help_text=_("The algorithm(s) for decoding JWT responses from the IDP."),
127-
default=None,
126+
help_text=_(
127+
"The algorithm(s) for decoding JWT responses from the IDP. "
128+
"Leave blank to extract from the .well-known configuration (if that fails we will attempt the default algorithms). "
129+
"Set to ['none'] to not use encrypted tokens (the provider must send unencrypted tokens for this to work)"
130+
),
131+
default=OpenIdConnectAuth.JWT_ALGORITHMS,
128132
allow_null=True,
129133
validators=[JWTAlgorithmListFieldValidator()],
130134
ui_field_label=_('OIDC JWT Algorithm(s)'),

0 commit comments

Comments
 (0)