Red Hat Single Sign-On Public Key Visible when accessed via browser

Solution In Progress - Updated -

Issue

  • For testing we have copied this URL and changed the client id and client secret and made a request through the browser. Still it returns the public key. Even without any client id or client secret it shows the PUB key. Is this expected?

Environment

  • Red Hat Single Sign-On 7.2.0
  • Red Hat Single Sign-On as IDP in 3scale. 'OpenID Connect Issuer' field configured as so: https://{client_id}:{client_secret}@{rh-sso-domain}.com/auth/realms/{realm}.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.