diff --git a/Dockerfile b/Dockerfile index 1b051d1..3457403 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,10 +1,9 @@ -FROM openresty/openresty:1.13.6.2-alpine -MAINTAINER Hans Kristian Flaatten +FROM openresty/openresty:1.17.8.2-5-alpine ENV \ SESSION_VERSION=2.22 \ HTTP_VERSION=0.12 \ - OPENIDC_VERSION=1.6.1 \ + OPENIDC_VERSION=1.7.0 \ JWT_VERSION=0.2.0 \ HMAC_VERSION=989f601acbe74dee71c1a48f3e140a427f2d03ae diff --git a/nginx/lua/auth.lua b/nginx/lua/auth.lua index 5ddad93..290d0a3 100644 --- a/nginx/lua/auth.lua +++ b/nginx/lua/auth.lua @@ -1,8 +1,8 @@ local opts = { - redirect_uri_path = os.getenv("OID_REDIRECT_PATH") or "/redirect_uri", + redirect_uri = os.getenv("OID_REDIRECT_PATH") or "/redirect_uri", --redirect_uri_path has been deprecated discovery = os.getenv("OID_DISCOVERY"), client_id = os.getenv("OID_CLIENT_ID"), - client_secret = os.getenv("OID_CLIENT_SECRET"), + --client_secret = os.getenv("OID_CLIENT_SECRET"), has been deprecated token_endpoint_auth_method = os.getenv("OIDC_AUTH_METHOD") or "client_secret_basic", -- Backwards compatible with typo 'OIDC_RENEW_ACCESS_TOKEN_ON_EXPIERY' renew_access_token_on_expiry = os.getenv("OIDC_RENEW_ACCESS_TOKEN_ON_EXPIRY") ~= "false" and os.getenv("OIDC_RENEW_ACCESS_TOKEN_ON_EXPIERY") ~= "false",