OIDC : configure userinfo endpoint to send signed jwt response

[Henri Mikkonen]

On 5.9.2024 14.21, Pierre SAGNE via users wrote:
> One of our clients requires that our userinfo endpoint returns a signed 
> response. I guess he means a signed jwt response, as I guess is a 
> possibility in the OIDC specs.
> 
> I have not found in the documentation how to configure this or whether 
> or not it is supported by the OIDC OP plugin.

It is supported by the plugin. You can configure the desired algorithm 
via metadata, see [1] and its section 2 "Client Metadata" and the value 
"userinfo_signed_response_alg".

[1] https://openid.net/specs/openid-connect-registration-1_0.html

BR,
Henri.