diff --git a/jans-auth-server/server/conf/jans-config.json b/jans-auth-server/server/conf/jans-config.json index 9768663f93e..6ea121ba2b8 100644 --- a/jans-auth-server/server/conf/jans-config.json +++ b/jans-auth-server/server/conf/jans-config.json @@ -400,6 +400,11 @@ "PS384", "PS512" ], + "ssaConfiguration": { + "ssaEndpoint":"${config.oxauth.contextPath}/restv1/ssa", + "ssaSigningAlg": "RS256", + "ssaExpirationInDays": 30 + }, "backchannelClientId": "123-123-123", "backchannelRedirectUri": "https://ce.gluu.info:8443/ciba/home.htm", "backchannelUserCodeParameterSupported": true, diff --git a/jans-auth-server/server/src/main/java/io/jans/as/server/servlet/OpenIdConfiguration.java b/jans-auth-server/server/src/main/java/io/jans/as/server/servlet/OpenIdConfiguration.java index d85db91af03..7fc622e0da2 100644 --- a/jans-auth-server/server/src/main/java/io/jans/as/server/servlet/OpenIdConfiguration.java +++ b/jans-auth-server/server/src/main/java/io/jans/as/server/servlet/OpenIdConfiguration.java @@ -284,7 +284,7 @@ protected void processRequest(HttpServletRequest servletRequest, HttpServletResp cibaConfigurationService.processConfiguration(jsonObj); // SSA - if (appConfiguration.isFeatureEnabled(FeatureFlagType.SSA)) { + if (appConfiguration.isFeatureEnabled(FeatureFlagType.SSA) && appConfiguration.getSsaConfiguration() != null) { jsonObj.put(SSA_ENDPOINT, appConfiguration.getSsaConfiguration().getSsaEndpoint()); } diff --git a/jans-linux-setup/jans_setup/openbanking/templates/jans-auth/jans-auth-config.json b/jans-linux-setup/jans_setup/openbanking/templates/jans-auth/jans-auth-config.json index 0d658dbcffc..452a31d375c 100644 --- a/jans-linux-setup/jans_setup/openbanking/templates/jans-auth/jans-auth-config.json +++ b/jans-linux-setup/jans_setup/openbanking/templates/jans-auth/jans-auth-config.json @@ -354,6 +354,11 @@ "cibaMaxExpirationTimeAllowedSec": 1800, "backchannelLoginHintClaims": ["inum", "uid", "mail"], "cibaEnabled": false, + "ssaConfiguration": { + "ssaEndpoint":"https://%(hostname)s/jans-auth/restv1/ssa", + "ssaSigningAlg": "RS256", + "ssaExpirationInDays": 30 + }, "cibaEndUserNotificationConfig": { "apiKey": "", "authDomain": "", diff --git a/jans-linux-setup/jans_setup/templates/jans-auth/jans-auth-config.json b/jans-linux-setup/jans_setup/templates/jans-auth/jans-auth-config.json index f6b2ac867e3..29021c37a34 100644 --- a/jans-linux-setup/jans_setup/templates/jans-auth/jans-auth-config.json +++ b/jans-linux-setup/jans_setup/templates/jans-auth/jans-auth-config.json @@ -455,6 +455,11 @@ "cibaMaxExpirationTimeAllowedSec": 1800, "backchannelLoginHintClaims": ["inum", "uid", "mail"], "cibaEnabled": false, + "ssaConfiguration": { + "ssaEndpoint":"https://%(hostname)s/jans-auth/restv1/ssa", + "ssaSigningAlg": "RS256", + "ssaExpirationInDays": 30 + }, "cibaEndUserNotificationConfig": { "apiKey": "", "authDomain": "",