(issuer: string, clientId: string, clientSecret: string)
| 40 | } |
| 41 | |
| 42 | export async function verifyIssuer(issuer: string, clientId: string, clientSecret: string): Promise<void> { |
| 43 | try { |
| 44 | const issuerUrl = new URL(issuer); |
| 45 | await oidc.discovery(issuerUrl, clientId, clientSecret); |
| 46 | } catch (err: any) { |
| 47 | logger.error("[SSO] Issuer verification failed: " + err.message); |
| 48 | throw new Error(`SSO Issuer verification failed: unable to reach ${issuer}/.well-known/openid-configuration`); |
| 49 | } |
| 50 | } |
| 51 | |
| 52 | // ─── Crypto helpers ─── |
| 53 |