Skip to content

Commit 2b48bd7

Browse files
authored
Add doc reference for client_auth_method (#70124)
Support for additional Client authentication methods was added in the OIDC realm in #58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
1 parent 060b3aa commit 2b48bd7

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

docs/reference/settings/security-settings.asciidoc

+17
Original file line numberDiff line numberDiff line change
@@ -1627,6 +1627,23 @@ at the OpenID Connect Provider.
16271627
The OAuth 2.0 Client Secret that was assigned to {es} during registration
16281628
at the OpenID Connect Provider.
16291629

1630+
// tag::rp-client-auth-method-tag[]
1631+
`rp.client_auth_method` {ess-icon}::
1632+
(<<static-cluster-setting, Static>>)
1633+
The client authentication method used by {es} to authenticate
1634+
to the OpenID Connect Provider. Can be `client_secret_basic`, `client_secret_post`,
1635+
or `client_secret_jwt`. Defaults to `client_secret_basic`.
1636+
// end::rp-client-auth-method-tag[]
1637+
1638+
// tag::rp-client-auth-jwt-signature-algorithm[]
1639+
`rp.client_auth_signature_algorithm` {ess-icon}::
1640+
(<<static-cluster-setting, Static>>)
1641+
The signature algorithm that {es} uses to sign the JWT with which it authenticates
1642+
as a client to the OpenID Connect Provider when `client_secret_jwt` is selected for
1643+
`rp.client_auth_method`. Can be either `HS256`, `HS384`, or `HS512`. Defaults to
1644+
`HS384`.
1645+
// end::rp-client-auth-jwt-signature-algorithm[]
1646+
16301647
// tag::rp-redirect-uri-tag[]
16311648
`rp.redirect_uri` {ess-icon}::
16321649
(<<static-cluster-setting,Static>>)

0 commit comments

Comments
 (0)