I have a similar issue to #33 however I'm in between a rock and a hard place. Let me explain.
When I configure an OIDC credential, by default the plugin tells me the issuer is https://jenkins-url/manage/configure/oidc (which does not exist). Leaving the field blank, https://jenkins-url/oidc/jwks replies correctly as expected. However this URL is not added to the token, causing the OIDC provider to try to reach out to /manage/configure/oidc (which returns a 404).
If I override the issuer URL and explicitly configure https://jenkins-url/oidc, Jenkins then stops serving /oidc and that too returns a 404.
I don't honestly know if this is a configuration thing that I'm missing, or if this is a bug in the plugin. But either way, I simply cannot get this plugin to do the authorization correctly. I think my only alternative at this point is to copy the JWKS/well-known configuration and put them somewhere else because the plugin is doing strange things.
What's strange is that I have 2 Jenkins servers, both running 2.452.3 and plugin version 79.v46f0066a_d813. One of them correctly exclaims that the issuer URL is https://jenkins-url/oidc, while the other does not. What am I missing?
I have a similar issue to #33 however I'm in between a rock and a hard place. Let me explain.
When I configure an OIDC credential, by default the plugin tells me the issuer is https://jenkins-url/manage/configure/oidc (which does not exist). Leaving the field blank, https://jenkins-url/oidc/jwks replies correctly as expected. However this URL is not added to the token, causing the OIDC provider to try to reach out to /manage/configure/oidc (which returns a 404).
If I override the issuer URL and explicitly configure https://jenkins-url/oidc, Jenkins then stops serving /oidc and that too returns a 404.
I don't honestly know if this is a configuration thing that I'm missing, or if this is a bug in the plugin. But either way, I simply cannot get this plugin to do the authorization correctly. I think my only alternative at this point is to copy the JWKS/well-known configuration and put them somewhere else because the plugin is doing strange things.
What's strange is that I have 2 Jenkins servers, both running 2.452.3 and plugin version 79.v46f0066a_d813. One of them correctly exclaims that the issuer URL is https://jenkins-url/oidc, while the other does not. What am I missing?