31 lines
788 B
Ruby
31 lines
788 B
Ruby
# frozen_string_literal: true
|
|
|
|
class JwksController < Doorkeeper::OpenidConnect::DiscoveryController
|
|
def index
|
|
render json: { keys: payload }
|
|
end
|
|
|
|
def keys
|
|
index
|
|
end
|
|
|
|
private
|
|
|
|
def payload
|
|
[
|
|
# We keep openid_connect_signing_key so that we can seamlessly
|
|
# replace it with ci_jwt_signing_key and remove it on the next release.
|
|
# TODO: Remove openid_connect_signing_key in 13.7
|
|
# https://gitlab.com/gitlab-org/gitlab/-/issues/221031
|
|
Rails.application.secrets.openid_connect_signing_key,
|
|
Gitlab::CurrentSettings.ci_jwt_signing_key
|
|
].compact.map do |key_data|
|
|
OpenSSL::PKey::RSA.new(key_data)
|
|
.public_key
|
|
.to_jwk
|
|
.slice(:kty, :kid, :e, :n)
|
|
.merge(use: 'sig', alg: 'RS256')
|
|
end
|
|
end
|
|
end
|