|
40 | 40 | $clientSecret, |
41 | 41 | $encryptionKey, |
42 | 42 | $privateKey, |
43 | | - [/* @FIXME: Server config keys go here */] |
| 43 | + [ |
| 44 | + /* URL of the OP's OAuth 2.0 Authorization Endpoint [OpenID.Core]. */ |
| 45 | + \Pdsinterop\Solid\Auth\Enum\OpenId\OpenIdConnectMetadata::AUTHORIZATION_ENDPOINT => 'https://server/authorize', |
| 46 | + |
| 47 | + /* URL using the https scheme with no query or fragment component that |
| 48 | + * the OP asserts as its Issuer Identifier. If Issuer discovery is |
| 49 | + * supported, this value MUST be identical to the issuer value returned |
| 50 | + * by WebFinger. This also MUST be identical to the iss Claim value in |
| 51 | + * ID Tokens issued from this Issuer. |
| 52 | + */ |
| 53 | + \Pdsinterop\Solid\Auth\Enum\OpenId\OpenIdConnectMetadata::ISSUER => 'https://server/identifier', |
| 54 | + |
| 55 | + /* URL of the OP's JSON Web Key Set [JWK] document. This contains the |
| 56 | + * signing key(s) the RP uses to validate signatures from the OP. The |
| 57 | + * JWK Set MAY also contain the Server's encryption key(s), which are |
| 58 | + * used by RPs to encrypt requests to the Server. |
| 59 | + * |
| 60 | + * When both signing and encryption keys are made available, a use |
| 61 | + * (Key Use) parameter value is REQUIRED for all keys in the referenced |
| 62 | + * JWK Set to indicate each key's intended usage. Although some |
| 63 | + * algorithms allow the same key to be used for both signatures and |
| 64 | + * encryption, doing so is NOT RECOMMENDED, as it is less secure. |
| 65 | + * |
| 66 | + * The JWK x5c parameter MAY be used to provide X.509 representations |
| 67 | + * of keys provided. When used, the bare key values MUST still be |
| 68 | + * present and MUST match those in the certificate. |
| 69 | + */ |
| 70 | + \Pdsinterop\Solid\Auth\Enum\OpenId\OpenIdConnectMetadata::JWKS_URI => 'https://server/jwk' |
| 71 | + ] |
44 | 72 | ))->create(); |
45 | 73 |
|
46 | 74 | $authorizationServer = (new \Pdsinterop\Solid\Auth\Factory\AuthorizationServerFactory($config))->create(); |
|
0 commit comments