Force GET when obtaining JWK by URI

lcrilly · web-flow · commit 2aa62c17e51a · 2019-09-25T15:35:30.000+01:00
diff --git a/openid_connect.server_conf b/openid_connect.server_conf
@@ -27,6 +27,7 @@
         proxy_cache_valid 200 12h;                    # How long to consider keys "fresh"
         proxy_cache_use_stale error timeout updating; # Use old JWK Set if cannot reach IdP
         proxy_ignore_headers Cache-Control Expires Set-Cookie; # Does not influence caching
+        proxy_method GET;                             # In case client request was non-GET
         proxy_pass $oidc_jwt_keyfile;                 # Expecting to find a URI here
     }
 

Original file line number	Diff line number	Diff line change
`@@ -27,6 +27,7 @@`
`27`	`27`	`proxy_cache_valid 200 12h; # How long to consider keys "fresh"`
`28`	`28`	`proxy_cache_use_stale error timeout updating; # Use old JWK Set if cannot reach IdP`
`29`	`29`	`proxy_ignore_headers Cache-Control Expires Set-Cookie; # Does not influence caching`
	`30`	`+ proxy_method GET; # In case client request was non-GET`
`30`	`31`	`proxy_pass $oidc_jwt_keyfile; # Expecting to find a URI here`
`31`	`32`	`}`
`32`	`33`