I'm looking to stack my authentication for a particular context.

i'm using oidc/oauth2 to authorize access to resources.  i want to use
multiple providers to both allow access. from the below snippet, i want to
allow multiple endpoints with their own client id/secret to authorize
traffic to /app. is this possible?

<VirtualHost 192.168.1.1:80>
  OIDCOAuthIntrospectionEndpoint https://myoauthserver/as/token.oauth2
  OIDCOAuthIntrospectionEndpointAuth client_secret_basic
  OIDCOAuthRemoteUserClaim user_email

  OIDCOAuthSSLValidateServer Off
  OIDCOAuthClientID MyClientId
  OIDCOAuthClientSecret MySecret

  OIDCOAuthIntrospectionEndpointParams grant_type=urn:pingidentity.com:
oauth2:grant_type:validate_bearer

  <Location /app>
    AuthType oauth20
    Require valid-user
  </Location>

</VirtualHost

Reply via email to