authenticate oidc

.../...
# Authenticate-oidc Action

resource "aws_lb_listener_rule" "oidc" {
 listener_arn = aws_lb_listener.front_end.arn  

 action {
   type = "authenticate-oidc" 

   authenticate_oidc {
     authorization_endpoint = "https://example.com/authorization_endpoint"
     client_id              = "client_id"
     client_secret          = "client_secret"
     issuer                 = "https://example.com"
     token_endpoint         = "https://example.com/token_endpoint"
     user_info_endpoint     = "https://example.com/user_info_endpoint"
   }
 }
.../...

Related

• authenticate-cognito

See also

• aws_lb_listener_rule: authenticate_oidc, authenticate-cognito, host_header
• OpenID Connect (OIDC), kubectl oidc-login, AWS IAM OIDC, EKS OIDC, EKS module, aws iam list-open-id-connect-providers | aws iam create-open-id-connect-provider | aws iam get-open-id-connect-provider, OIDC tokens, aws_lb_listener_rule, Google Cloud Identity, Claims, keycloak_oidc_identity_provider, settings, OIDC client, client_id, client_secret, Authorization Code Flow, OIDC Web App, Back-Channel