diff options
Diffstat (limited to 'interface-definitions/service_https.xml.in')
| -rw-r--r-- | interface-definitions/service_https.xml.in | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/interface-definitions/service_https.xml.in b/interface-definitions/service_https.xml.in index d2cadeffe..0306ef1a1 100644 --- a/interface-definitions/service_https.xml.in +++ b/interface-definitions/service_https.xml.in @@ -81,6 +81,31 @@ </properties> <defaultValue>32</defaultValue> </leafNode> + <node name="oidc"> + <properties> + <help>OpenID Connect authentication</help> + </properties> + <children> + <leafNode name="issuer"> + <properties> + <help>OIDC issuer URL (must match iss claim in token)</help> + <valueHelp> + <format>url</format> + <description>OIDC issuer URL e.g. https://keycloak.example.com/realms/vyos</description> + </valueHelp> + </properties> + </leafNode> + <leafNode name="jwks-url"> + <properties> + <help>JWKS endpoint URL (if different from issuer discovery)</help> + <valueHelp> + <format>url</format> + <description>JWKS endpoint URL e.g. https://keycloak.example.com/realms/vyos/protocol/openid-connect/certs</description> + </valueHelp> + </properties> + </leafNode> + </children> + </node> </children> </node> </children> |