OAuth Introspection Endpoint for OpenShift Container Platform
Issue
- How to do standard OAuth Introspection on the built-in OAuth server in OpenShift Container Platform?
-
The
/.well-known/oauth-authorization-serveroutput does not list the OAuth "introspection_endpoint":$ curl -k https://api.example.com:6443/.well-known/oauth-authorization-server { "issuer": "https://oauth-openshift.apps.example.com", "authorization_endpoint": "https://oauth-openshift.apps.example.com/oauth/authorize", "token_endpoint": "https://oauth-openshift.apps.example.com/oauth/token", "scopes_supported": [ "user:check-access", "user:full", "user:info", "user:list-projects", "user:list-scoped-projects" ], "response_types_supported": [ "code", "token" ], "grant_types_supported": [ "authorization_code", "implicit" ], "code_challenge_methods_supported": [ "plain", "S256" ] }
Environment
- OpenShift Container Platform (OCP) 3.x
- OpenShift Container Platform (OCP) 4.1, 4.2, 4.3
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.