X-Userinfo is not passed to Upstream server

Announcements
1

Hi There,
I have experimenting kong with oidc plugin in docker(GitHub - nokia/kong-oidc: OIDC plugin for Kong)
I have a simple Spring Boot application as a upstream server.
I am using okta as identity provider. Kong is routing only authenticated requests to Spring Boot application as expected. But the i am missing the headers
X-Userinfo, X-Access-Token and X-Id-Token in the http requests routed to my application.

I am enabling oidc plugin on my route with below params
name=oidc
config.client_id=****
config.client_secret=****
config.discovery=****

Any thing i miss here?

2

i know this is more more about third party plugin.
just wondering if some used the plugin https://github.com/nokia/kong-oidc

on debug mode, below message has shown up. I passed config.discovery and introspection url’s set correctly. Appreciate any clue.

2020/04/21 20:00:34 [debug] 25#0: *413 [lua] openidc.lua:417: openidc_call_userinfo_endpoint(): no userinfo endpoint supplied

2020/04/21 20:00:34 [debug] 25#0: *413 [lua] openidc.lua:978: authenticate(): OIDC Authorization Code Flow completed -> Redirecting to original URL (/)

Thanks
Rana

3

I found the issue

i configured discovery url wrong. openid-configuration will have userinfo end point

https://xxxxx/oauth2/default/.well-known/oauth-authorization-server
is replaced with
https://xxxxx/oauth2/default/.well-known/openid-configuration