Is it safe to expose the "/auth/realms/realm-name/protocol/openid-connect/certs" to the public internet?
Issue
- Can you please confirm if it is safe to make `/auth/realms/{realm-name}/protocol/openid-connect/certs" publicly accessible on the internet?
- Does it contain sensitive data that should not be exposed?
Environment
Red Hat Single Sign-On (RH-SSO) 7.3.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
