(discovery) config and storage

pkg/op/discovery.go

@@ -11,7 +11,7 @@ func Discover(w http.ResponseWriter, config *oidc.DiscoveryConfiguration) {
 	utils.MarshalJSON(w, config)
 }
 
-func CreateDiscoveryConfig(c Configuration) *oidc.DiscoveryConfiguration {
+func CreateDiscoveryConfig(c Configuration, s Signer) *oidc.DiscoveryConfiguration {
 	return &oidc.DiscoveryConfiguration{
 		Issuer:                c.Issuer(),
 		AuthorizationEndpoint: c.AuthorizationEndpoint().Absolute(c.Issuer()),
@@ -20,14 +20,61 @@ func CreateDiscoveryConfig(c Configuration) *oidc.DiscoveryConfiguration {
 		UserinfoEndpoint: c.UserinfoEndpoint().Absolute(c.Issuer()),
 		// EndSessionEndpoint: c.TokenEndpoint().Absolute(c.Issuer())(c.EndSessionEndpoint),
 		// CheckSessionIframe: c.TokenEndpoint().Absolute(c.Issuer())(c.CheckSessionIframe),
-		JwksURI: c.KeysEndpoint().Absolute(c.Issuer()),
-		// ScopesSupported:                   oidc.SupportedScopes,
-		// ResponseTypesSupported:            responseTypes,
-		// GrantTypesSupported:               oidc.SupportedGrantTypes,
+		JwksURI:                c.KeysEndpoint().Absolute(c.Issuer()),
+		ScopesSupported:        scopes(c),
+		ResponseTypesSupported: responseTypes(c),
+		GrantTypesSupported:    grantTypes(c),
 		// ClaimsSupported:                   oidc.SupportedClaims,
-		// IdTokenSigningAlgValuesSupported:  []string{keys.SigningAlgorithm},
-		// SubjectTypesSupported:             []string{"public"},
-		// TokenEndpointAuthMethodsSupported:
-
+		IDTokenSigningAlgValuesSupported:  sigAlgorithms(s),
+		SubjectTypesSupported:             subjectTypes(c),
+		TokenEndpointAuthMethodsSupported: authMethods(c),
 	}
 }
+
+func scopes(c Configuration) []string {
+	return []string{
+		"openid",
+		"profile",
+		"email",
+		"phone",
+	} //TODO: config
+}
+
+func responseTypes(c Configuration) []string {
+	return []string{
+		"code",
+		"id_token",
+		// "code token",
+		// "code id_token",
+		"id_token token",
+		// "code id_token token"
+	}
+}
+
+func grantTypes(c Configuration) []string {
+	return []string{
+		"client_credentials",
+		"authorization_code",
+		// "password",
+		"urn:ietf:params:oauth:grant-type:token-exchange",
+	}
+}
+
+func sigAlgorithms(s Signer) []string {
+	return []string{string(s.SignatureAlgorithm())}
+}
+
+func subjectTypes(c Configuration) []string {
+	return []string{"public"} //TODO: config
+}
+
+func authMethods(c Configuration) []string {
+	authMethods := make([]string, 0, 2)
+	if c.AuthMethodBasicSupported() {
+		authMethods = append(authMethods, authMethodBasic)
+	}
+	if c.AuthMethodPostSupported() {
+		authMethods = append(authMethods, authMethodPost)
+	}
+	return authMethods
+}