Skip to content

feat(server): add configurable path prefix for path-based service differentiation - #110

Merged
Mortega5 merged 1 commit into
mainfrom
feat/server-prefix
Jul 30, 2026
Merged

feat(server): add configurable path prefix for path-based service differentiation#110
Mortega5 merged 1 commit into
mainfrom
feat/server-prefix

Conversation

@Mortega5

Copy link
Copy Markdown
Collaborator
  • Added the server.pathPrefix property to configure the path prefix for all resources (CCS, health, and metrics endpoints are not affected).

@Mortega5
Mortega5 requested a review from wistefan July 29, 2026 12:55
@Mortega5 Mortega5 added the minor Should be applied for new functionality or bigger updates. label Jul 29, 2026
@Mortega5
Mortega5 force-pushed the feat/server-prefix branch from b64d35b to 1e32d6e Compare July 29, 2026 12:56

@wistefan wistefan left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The prefix also needs to be added to the well-known objects. The token endpoint in the .well-known/openid-configuration f.e. would be wrong

@Mortega5

Copy link
Copy Markdown
Collaborator Author

It is actually already covered: the prefix is set into v.host once, at verifier construction time in InitVerifier (verifier/verifier.go:397 and verifier/verifier.go:400).
Every field in GetOpenIDConfiguration — Issuer, AuthorizationEndpoint, TokenEndpoint, JwksUri (verifier/verifier.go:896-899) — derives from v.host, so they all inherit the prefix automatically, no per-field handling needed.

Verified end-to-end in a dev environment:

curl https://verifier.dev.xxxx.yyy/verifier/services/data-service/.well-known/openid-configuration
{
  "issuer": "https://verifier.dev.xxxx.yyy/verifier",
  "authorization_endpoint": "https://verifier.dev.xxxx.yyy/verifier/api/v1/authorization",
  "token_endpoint": "https://verifier.dev.xxxx.yyy/verifier/services/data-service/token",
  "jwks_uri": "https://verifier.dev.xxxx.yyy/verifier/.well-known/jwks",
  "scopes_supported": [
    "operator"
  ],
  "response_types_supported": [
    "code"
  ],
  "response_mode_supported": [
    "direct_post"
  ],
  "grant_types_supported": [
    "authorization_code",
    "vp_token",
    "urn:ietf:params:oauth:grant-type:token-exchange"
  ],
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ]
}

did I miss anything?

@Mortega5
Mortega5 merged commit ef9e7c2 into main Jul 30, 2026
17 checks passed
@Mortega5
Mortega5 deleted the feat/server-prefix branch July 30, 2026 08:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

minor Should be applied for new functionality or bigger updates.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants