hashicorp / vault-plugin-auth-jwt

A Vault plugin to allow authentication via JWT (and OIDC) tokens

hashicorp/vault-plugin-auth-jwt Issues

Vault: api error: status code 400: error configuring token validator: keyset configuration error
Updated a month ago1
[Help] groups_claim lookup on claim at userinfo not working
Closed a year ago5
Audience claim validation required if token contains a list of audiences only
Closed 2 months ago6
Using Openshift platform as OIDC provider
Updated 2 months ago1
Intermittent error: claim "ref_protected" does not match any associated bound claim values
Updated 2 months ago
Fail to verify a GitLab JWKS URL
Updated 4 months ago1
Auth jwt plugin bypasses configured vault proxy in CLI
Updated 4 months ago
permission denied error
Updated 4 months ago1
JWKS documentation for JWT token validation
Closed 4 months ago1
Adding support for acr_values configuration of oidc
Updated 6 months ago
Unable to upload PEM for JWT CA using UI
Closed 7 months ago5
OIDC should support Authorization,Token and Userinfo endpoints if well-known configuration endpoint is not present on provider
Updated 6 months ago1
"'oidc_discovery_url' must be set for OIDC" when trying to use jwks_url
Updated 6 months ago
Improper validation of role config
Updated 6 months ago1
Allow auth for OIDC tokens that do not contain a group claim
Updated 6 months ago
Feature Request: Add access_token as an Optional Parameter to /auth/jwt/login for Group Fetching
Updated 8 months ago
Add regex as an optional value for the `bound_claims_type`
Updated 8 months ago
Add ability to log in with specific policies
Updated 9 months ago1
Vault CLI auth with oidc does not work with namespaces
Closed 9 months ago1
If a suspend signal is received during the login flow, the suspended process will indefinitely hold the callback port, blocking logins for other system users
Closed 10 months ago1
Providing file path to the gsuite_service_account in not working anymore
Closed 3 years ago4
GSuite custom provider: allow using Application Default Credentials
Closed a year ago1
CLI Login fails with POST response mode
Closed a year ago10
Feature request: Add option for getting additional claims from /userinfo endpoint for JWT authentication
Updated a year ago
How to set Hosted Domain in OIDC Role config?
Closed a year ago1
JWT Auth config discrepancy between the documentation and code
Closed a year ago3
Vault OIDC cannot fetch g suite groups
Closed a year ago5
Fail to get groups from google if workplace have more that 1 domain setup
Closed a year ago9
[Help] bound_claims_are_regexps not working
Closed 2 years ago4
[req] Ability to use JWT Role Name as Identity entity alias name
Updated 2 years ago
Add support for HMAC512 JWT
Closed 2 years ago1
Feature request: Add support for private_key_jwt as an alternative to client_secret
Updated 2 years ago
JWT/OIDC config for Kubernetes fails with audience claim does not match any expected audience
Closed 2 years ago4
Out of date dependency causing error fetching G-Suite groups with GCP restricted VIP
Closed 2 years ago1
[req] Allow json pointers when specifying a user claim
Closed 2 years ago5
JWT/OIDC Token Verification
Closed 2 years ago6
vault CLI does not receive localhost:8250 redirect after auth
Updated 3 years ago3
JWT validation fails after EKS OIDC provider's key rotation
Updated 3 years ago2
Ability to fully customize the oidc discovery url
Updated 3 years ago1
[req] Configurable aliases independent from the user_claim
Updated 3 years ago
Can't authenticate with OIDC via curl (or any external request)
Closed 3 years ago1
Support public OIDC clients without the client-secret defined
Updated 3 years ago1
JWKS URL changes aren't reflected immediately
Closed 3 years ago
not able to match groups from gsuite using OIDC in `bound_claims`
Closed 3 years ago
Unable to map vault groups with Gsuit ones
Closed 4 years ago1
oidc: use claim_mappings for bound_claims
Closed 4 years ago3
Google oidc can't read group info
Closed 4 years ago1
oidc: gsuite custom provider groups cannot use bound claims
Closed 4 years ago3
JWT auth succeeds with a group-alias bounded to the OIDC mount_accessor
Updated 4 years ago
Automatically match Group Alias with OIDC groups claim
Updated 4 years ago