Skip to content

Commit 8f4f8db

Browse files
authored
Update README.md
1 parent dfb7270 commit 8f4f8db

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

README.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ All files can be copied to **/etc/nginx/conf.d**
5656

5757
* Create an OpenID Connect client to represent your NGINX Plus instance
5858
* Choose the authorization code flow
59-
* Set the `redirect URI` to address of your NGINX Plus instance, with `/_codexch` as the path
59+
* Set the **redirect URI** to the address of your NGINX Plus instance, with `/_codexch` as the path, e.g. `https://my-nginx.example.com/_codexch`
6060
* Ensure NGINX Plus is configured as a confidential client (with a clent secret)
6161
* Make a note of the `client ID` and `client secret`
6262

@@ -70,12 +70,12 @@ The GitHub repository contains [include](http://nginx.org/en/docs/ngx_core_modul
7070

7171
* **frontend.conf** - this is the reverse proxy configuration and where the IdP is configured
7272
* Modify the upstream group to match your backend site or app
73-
* Configure the preferred listen port and enable SSL/TLS configuration
73+
* Configure the preferred listen port and [enable SSL/TLS configuration](https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/)
7474
* Modify all of the `set $oidc_` directives to match your IdP configuration
7575
* Set a unique value for `$oidc_hmac_key` to ensure nonce values are unpredictable
7676

7777
* **openid_connect.server_conf** - this is the NGINX configuration for handling the various stages of OpenID Connect authorization code flow
78-
* Modify the `add_header Set-Cookie` directives with appropriate cookie flags, e.g. Domain; Path; Secure;
78+
* Modify the `add_header Set-Cookie` directives with appropriate [cookie flags](https://en.wikipedia.org/wiki/HTTP_cookie#Terminology), e.g. Domain; Path; Secure;
7979
* Modify the `resolver` directive to match a DNS server that is capable of resolving the IdP defined in `$oidc_token_endpoint`
8080

8181
* **openid_connect.js** - this is the nginScript code for performing the authorization code exchange and nonce hashing

0 commit comments

Comments
 (0)