Change identity provider to https (#22)

stolostron · Jun 28, 2018 · ee50d61 · ee50d61
1 parent e533b88
commit ee50d61
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/rootfs/opt/ibm/router/nginx/conf/oidc.lua b/rootfs/opt/ibm/router/nginx/conf/oidc.lua
@@ -150,8 +150,9 @@ local function validate_access_token_or_exit()
 
     ngx.log(ngx.NOTICE, "Received OIDC token =",token)
     local httpc = http.new()
-    local res, err = httpc:request_uri("http://platform-identity-provider.kube-system.svc."..cluster_domain..":4300/v1/auth/userInfo", {
+    local res, err = httpc:request_uri("https://platform-identity-provider.kube-system.svc."..cluster_domain..":4300/v1/auth/userInfo", {
         method = "POST",
+        ssl_verify = false,
         body = "access_token=" .. token,
         headers = {
           ["Content-Type"] = "application/x-www-form-urlencoded",