rstudio - 在使用 OpenID Connect 和 cognito IDP 进行 SSO 时卡在 Rstudio Rserver Pro 1.4 专业版中？

Question

我/etc/rstudio/rserver.conf认为遵循固定设置。

auth-openid-issuer=https://op.example.com

这将从https://op.example.com/.well-known/openid-configuration.json. 是否可以更改为“发行者”的不同 URL（域）openid-configuration.json？我想显示我创建的登录屏幕。

这里authorization_endpoint运行的 API 网关域与 Idp 不同。因此，opennid-configuration.json指的是不同于 Idp 的域。我想将它与 Idp 方面的发行人分开。

当我尝试将它分开时，我得到了如下日志：-

18 Jan 2021 07:07:23 [rserver-monitor] ERROR 18 Jan 2021 07:07:23 [rserver] ERROR OpenID failed with error: oidc: id token issued by a different provider, expected "https://op.example.com" got "https://cognito-idp.ap-northeast-1.amazonaws.com/ap-northeast-1_XXXXXXXX"; LOGGED FROM: void rstudio::server::openid_auth::{anonymous}::writeResponse(rstudio_boost::shared_ptr<rstudio::core::http::AsyncConnection>, const rstudio::core::http::Response&) src/cpp/server/openid_auth/ServerOpenIDAuth.cpp:147|||
18 Jan 2021 07:07:23 [rserver-monitor] ERROR 18 Jan 2021 07:07:23 [rserver] ERROR rserver-openid: OpenID handling error trying to obtaining id token: oidc: id token issued by a different provider, expected "https://op.example.com" got "https://cognito-idp.ap-northeast-1.amazonaws.com/ap-northeast-1_XXXXXXXX"; LOGGED FROM: void rstudio::server::ProcessMonitor::onProcessStderr(rstudio::server::ProcessMonitor::Process, const string&) src/cpp/server/ServerProcessMonitor.cpp:247|||

我曾尝试以不同的方式做到这一点，但失败了。我还问cognito我是否可以更改 ID 令牌网址，但 Cognito 不允许这样做。

我希望我在这里得到帮助。

标签： rstudiosingle-sign-onamazon-cognitoopenid-connect