Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add API for fetching Fulcio configuration #607

Closed
haydentherapper opened this issue May 24, 2022 · 1 comment · Fixed by #608
Closed

Add API for fetching Fulcio configuration #607

haydentherapper opened this issue May 24, 2022 · 1 comment · Fixed by #608
Labels
enhancement New feature or request

Comments

@haydentherapper
Copy link
Contributor

Description

Suggested by @var-sdk, clients have no way to discover what OIDC issuers are supported by Fulcio programatically. Additionally, without reading source code or documentation, clients don't know which claim needs to be signed for a proof of possession. Let's create an API that provides the following:

  • All OIDC issuers
  • The expected audience of the token
  • The claim that needs to be signed for a proof of possession
@lukehinds
Copy link
Member

Sounds like a good idea to me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants