Skip to content

OIDC docs#2858

Merged
simonredfern merged 3 commits into
OpenBankProject:developfrom
constantine2nd:develop
Jul 13, 2026
Merged

OIDC docs#2858
simonredfern merged 3 commits into
OpenBankProject:developfrom
constantine2nd:develop

Conversation

@constantine2nd

Copy link
Copy Markdown
Contributor

No description provided.

…ARDING.md

Document the Console half of onboarding: project setup, OAuth consent
screen (user type, non-sensitive scopes, publishing status), OAuth client
creation (redirect URI belongs to the client/BFF, never OBP-API), and how
the resulting client ID feeds oauth2.google.allowed_audiences. Notes the
client secret stays with the BFF and cross-references the (azp, iss)
one-client-per-app rationale in OAUTH2_IDENTITY_PROVIDERS.md.
OAUTH2_IDENTITY_PROVIDERS.md -> docs/IdP/, GOOGLE_OIDC_ONBOARDING.md ->
docs/IdP/Google/ (provider-specific runbooks get a subfolder per IdP).
Update the cross-references: the Google doc now points at
../OAUTH2_IDENTITY_PROVIDERS.md and the OAuth2ConsumerResolutionTest
header comment at docs/IdP/OAUTH2_IDENTITY_PROVIDERS.md.
@sonarqubecloud

Copy link
Copy Markdown

@simonredfern simonredfern merged commit e791640 into OpenBankProject:develop Jul 13, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants