Oidc Gatekeeper Extended

Learn about configurations >

• after-login-url | string

  Default: /

  URL to redirect to after a successful login.

• ca-bundle | string

  Custom CA to be trusted by OIDC gatekeeper. It is suggested to have the config: ca-bundle: | -----BEGIN CERTIFICATE----- .... -----END CERTIFICATE-----

• client-id | string

  Default: authservice-oidc

  OpenID Connect client ID

• client-name | string

  Default: Ambassador Auth OIDC

  Human-friendly OpenID Connect client name

• client-secret | string

  OpenID Connect client secret

• enable-jwt | boolean

  Enable JWT bearer token authentication alongside cookie-based session auth. When enabled, the oidc-authservice will accept Authorization header bearer tokens and ID tokens in addition to session cookies.

• oidc-scopes | string

  Default: profile email groups

  OpenID Connect scopes

• skip-auth-urls | string

  If not empty, this is a comma-separated list of paths, e.g. "/path1/,/path2/". That list defines which paths do not need to be authenticated on OIDC. The DEX path is always added to this list.

• userid-claim | string

  Default: email

  OpenID Connect claim whose value will be used as the userid.