I'm looking to stack my authentication for a particular context.
i'm using oidc/oauth2 to authorize access to resources. i want to use
multiple providers to both allow access. from the below snippet, i want to
allow multiple endpoints with their own client id/secret to authorize
traffic to /app. is this possible?
<VirtualHost 192.168.1.1:80>
OIDCOAuthIntrospectionEndpoint https://myoauthserver/as/token.oauth2
OIDCOAuthIntrospectionEndpointAuth client_secret_basic
OIDCOAuthRemoteUserClaim user_email
OIDCOAuthSSLValidateServer Off
OIDCOAuthClientID MyClientId
OIDCOAuthClientSecret MySecret
OIDCOAuthIntrospectionEndpointParams grant_type=urn:pingidentity.com:
oauth2:grant_type:validate_bearer
<Location /app>
AuthType oauth20
Require valid-user
</Location>
</VirtualHost
i'm using oidc/oauth2 to authorize access to resources. i want to use
multiple providers to both allow access. from the below snippet, i want to
allow multiple endpoints with their own client id/secret to authorize
traffic to /app. is this possible?
<VirtualHost 192.168.1.1:80>
OIDCOAuthIntrospectionEndpoint https://myoauthserver/as/token.oauth2
OIDCOAuthIntrospectionEndpointAuth client_secret_basic
OIDCOAuthRemoteUserClaim user_email
OIDCOAuthSSLValidateServer Off
OIDCOAuthClientID MyClientId
OIDCOAuthClientSecret MySecret
OIDCOAuthIntrospectionEndpointParams grant_type=urn:pingidentity.com:
oauth2:grant_type:validate_bearer
<Location /app>
AuthType oauth20
Require valid-user
</Location>
</VirtualHost