Repository navigation
Support non-tls providers for the oauth command http:// #1247
Description
I would like to use step oauth with a local test instance of keycloak, but I can't because it only accepts https:// urls:
Line 329 in 797ae59
The error it gives when I try is also misleading:
$ step oauth --client-id=test-client-000 \
> --provider=http://localhost:8080/realms/test/.well-known/openid-configuration
use a valid provider: google or githubMetadata
Metadata
Assignees
Labels
No labels
Activity
hslatman commentedon Jul 29, 2024
Hey @aucampia,
A similar issue was opened recently, and there's some work in progress to make a connection work to an OAuth endpoint with a certificate issued by
step-caitself: smallstep/certificates#1940. That won't make it work for HTTP, but it does allow you to configure your local Keycloak if you provide it with a cert fromstep-caitself.I'll keep the issue open, so that we can internally discuss if we want to support plain HTTP too.