File tree Expand file tree Collapse file tree 1 file changed +1
-1
lines changed
Expand file tree Collapse file tree 1 file changed +1
-1
lines changed Original file line number Diff line number Diff line change @@ -41,7 +41,7 @@ description: OpenID Connect(OIDC)是基于 OAuth 2.0 的身份认证协议
4141| scope | string | 否 | "openid" | | OIDC 范围对应于应返回的有关经过身份验证的用户的信息,也称为 [ claims] ( https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims ) 。默认值是` openid ` ,这是 OIDC 返回唯一标识经过身份验证的用户的 ` sub ` 声明所需的范围。可以附加其他范围并用空格分隔,例如 ` openid email profile ` 。 |
4242| realm | string | 否 | "apisix" | | bearer token 无效时 [ ` WWW-Authenticate ` 响应头] ( https://www.rfc-editor.org/rfc/rfc6750#section-3 ) 中会伴随着的 ` realm ` 讯息。 |
4343| claim_validator | object | 否 | {} | | 设置 JWT claim 验证器。 |
44- | claim_validator.audience | object | 否 | | | OpenID Connect Audience ([ "aud"] ( https://openid.net/specs/openid-connect-core-1_0.html ) ) 验证器. |
44+ | claim_validator.audience | object | 否 | | | OpenID Connect Audience ([ "aud"] ( https://openid.net/specs/openid-connect-core-1_0.html ) ) 验证器。 |
4545| claim_validator.audience.claim | string | 否 | "aud" | | 自定义存储 audience 的声明(字段名)。|
4646| claim_validator.audience.required | boolean | 否 | false | | 要求 JWT 中的 audience 声明必须存在,它将遵循自定义声明设置。 |
4747| claim_validator.audience.match_with_client_id | boolean | 否 | false | | 要求 JWT 中的 audience 声明与 client_id 相等(其值为字符串时)或包含 client_id(其值为字符串数组时),这符合 OpenID Connect 规范中的定义。 |
You can’t perform that action at this time.
0 commit comments