Skip to content

Commit 52e39b0

Browse files
authored
Add doc reference for client_auth_method (#70124) (#70213)
Support for additional Client authentication methods was added in the OIDC realm in #58708. This change adds the `rp.client_auth_method` and `rp.client_auth_signature_algorithm` settings in the realm settings reference doc.
1 parent 28263a3 commit 52e39b0

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

docs/reference/settings/security-settings.asciidoc

+17
Original file line numberDiff line numberDiff line change
@@ -1623,6 +1623,23 @@ at the OpenID Connect Provider.
16231623
The OAuth 2.0 Client Secret that was assigned to {es} during registration
16241624
at the OpenID Connect Provider.
16251625

1626+
// tag::rp-client-auth-method-tag[]
1627+
`rp.client_auth_method` {ess-icon}::
1628+
(<<static-cluster-setting, Static>>)
1629+
The client authentication method used by {es} to authenticate
1630+
to the OpenID Connect Provider. Can be `client_secret_basic`, `client_secret_post`,
1631+
or `client_secret_jwt`. Defaults to `client_secret_basic`.
1632+
// end::rp-client-auth-method-tag[]
1633+
1634+
// tag::rp-client-auth-jwt-signature-algorithm[]
1635+
`rp.client_auth_signature_algorithm` {ess-icon}::
1636+
(<<static-cluster-setting, Static>>)
1637+
The signature algorithm that {es} uses to sign the JWT with which it authenticates
1638+
as a client to the OpenID Connect Provider when `client_secret_jwt` is selected for
1639+
`rp.client_auth_method`. Can be either `HS256`, `HS384`, or `HS512`. Defaults to
1640+
`HS384`.
1641+
// end::rp-client-auth-jwt-signature-algorithm[]
1642+
16261643
// tag::rp-redirect-uri-tag[]
16271644
`rp.redirect_uri` {ess-icon}::
16281645
(<<static-cluster-setting,Static>>)

0 commit comments

Comments
 (0)