[External Email] Re: disable oauth2-jwt

[Cantor, Scott]

> Hello - I believe I found the problem, but I'm unsure where /
> how to resolve it.

This is still debugging material, not an error.

> I am using the PHP JumbojettOpenIDConnectClient client to
> test and have set the token_endpoint as listed in our well
>-known services; however, when passed and decoded by
> Shibboleth, it resolves to the server non-routable address, as
> shown below in the endpointURL. The redirectionURI is not
> affected by whatever is occurring.

I'm not familiar with any parameter in an OAuth token request called endpointURI. The redirect_uri is there to cross-check the original authorization grant, but there's nothing called endpointURI I know of.

I am far from an expert in OAuth, but I don't think that parameter whatever it is matters in the slightest, it's likely being picked up as an extension field.

Henri isn't around for the moment, so you might have to wait until he's back for a more authoritative answer, but I'm happy to look at logs via pastebin to avoid blowing through the list cap.

-- Scott