OIDC Authorization code affinity loadbalancing

[Scott Cantor]

> On Sep 2, 2026, at 8:47 AM, Simon Lundström via users <users at shibboleth.net> wrote:
> 
> While implementing OIDC for our IDP I wrote a, hopefully, complete iRule for the F5 BIG-IP loadbalancers to support the authorization_code grant according to the documentation[1].

I had lost hope it was viable to actually pull that off, but it's probably useful if one limits some of the options.

> I’ve added the iRule to the documentation. Let me know if you want it on a separate page or in some other way.

That seems the best place.

> Scott (and/or Henri?): Can you verify the iRule so I covered all cases? I tried to read the code but I’m not that great at reading Java. Please let me know and I’ll fix it.

I wouldn't have any idea, but I can't imagine it handles every possible case, plus the tokens themselves would have to be handled in general.

Since POST can be used, that alone seemed to be a dealbreaker...

Anything at all is very appreciated regardless.

Thanks,
-- Scott