You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -56,7 +56,7 @@ All files can be copied to **/etc/nginx/conf.d**
56
56
57
57
* Create an OpenID Connect client to represent your NGINX Plus instance
58
58
* Choose the authorization code flow
59
-
* Set the `redirect URI` to address of your NGINX Plus instance, with `/_codexch` as the path
59
+
* Set the **redirect URI** to the address of your NGINX Plus instance, with `/_codexch` as the path, e.g. `https://my-nginx.example.com/_codexch`
60
60
* Ensure NGINX Plus is configured as a confidential client (with a clent secret)
61
61
* Make a note of the `client ID` and `client secret`
62
62
@@ -70,12 +70,12 @@ The GitHub repository contains [include](http://nginx.org/en/docs/ngx_core_modul
70
70
71
71
***frontend.conf** - this is the reverse proxy configuration and where the IdP is configured
72
72
* Modify the upstream group to match your backend site or app
73
-
* Configure the preferred listen port and enable SSL/TLS configuration
73
+
* Configure the preferred listen port and [enable SSL/TLS configuration](https://docs.nginx.com/nginx/admin-guide/security-controls/terminating-ssl-http/)
74
74
* Modify all of the `set $oidc_` directives to match your IdP configuration
75
75
* Set a unique value for `$oidc_hmac_key` to ensure nonce values are unpredictable
76
76
77
77
***openid_connect.server_conf** - this is the NGINX configuration for handling the various stages of OpenID Connect authorization code flow
78
-
* Modify the `add_header Set-Cookie` directives with appropriate cookie flags, e.g. Domain; Path; Secure;
78
+
* Modify the `add_header Set-Cookie` directives with appropriate [cookie flags](https://en.wikipedia.org/wiki/HTTP_cookie#Terminology), e.g. Domain; Path; Secure;
79
79
* Modify the `resolver` directive to match a DNS server that is capable of resolving the IdP defined in `$oidc_token_endpoint`
80
80
81
81
***openid_connect.js** - this is the nginScript code for performing the authorization code exchange and nonce hashing
0 commit comments