I am getting 'JSON metadata did not contain an "issuer" string', even though the JSON metadata appears to include 'issuer' with value.

[ohaya]

I am trying to use "mod_auth_openidc-2.3.7-8.module_el8.4.0+674+2c6c7264.x86_64" on CENTOS 8 with Apache 2.4.63 (built from source) and with Oracle Cloud Infrastructure (OCI), and when I test I am seeing the following in the Apache error_log:

[Wed Mar 19 03:38:52.912890 2025] [auth_openidc:error] [pid 14969:tid 15035] [client 100.36.177.53:51356] oidc_metadata_provider_is_valid: provider ((null)) JSON metadata did not contain an "issuer" string [Wed Mar 19 03:38:52.912910 2025] [auth_openidc:error] [pid 14969:tid 15035] [client 100.36.177.53:51356] oidc_provider_static_config: could not retrieve metadata from url: https://idcs-697d8bc1d2284....fa1f015a.identity.oraclecloud.com/.well-known/idcs-configuration

However, when I do a request for the metadata using a browser, the JSON I am seeing has:

{"issuer":"https://identity.oraclecloud.com/","authorization_endpoint":"https://idcs-697d8bc1d...b0f6b7b9fa1f015a.identity.oraclecloud.com/oauth2/v1/authorize...

I think the 2.3.7 version, which I installed using "yum install", may be pretty old... is it possible that I am running into an old bug?

Thanks,
Jim

[zandbelt]

I would advise you to upgrade to a recent version indeed, you can get the el8 build of the latest release from: https://github.com/OpenIDC/mod_auth_openidc/releases/

[zandbelt]

FWIW: the URL https://idcs-697d8bc1d2284....fa1f015a.identity.oraclecloud.com/.well-known/idcs-configuration doesn't seem to adhere to the standard which should be something ending in .well-known/openid-configuration, not sure if that matters.

[ohaya]

zandbelt - you were right! It should have been 'openid-configuration' instead of 'idcs-configuration' .

Thanks!

Jim