Disable Automatic Issuer Configuration in the Appsync OpenID Connect Authorization mode

0

In the Appsync OpenID Connect authorization mode. Appsync automatically adds a .well-known/opened-configuration path to the provided Issuer URL. This is causing a huge problem because my application uses custom keys to generate the Azure AD OAuth JWT ID token. My OIDC meta document path is like this: 'https://login.microsoftonline.com/{tenant_id}/.well-known/opened-configuration?appid={client_id}'(i.e., has a query parameter at the end) which contains the jwks_uri(This jwks_uri contains the public keys of the created JWT id token). As you can see, in my case, a query parameter(?appid={client_id} was added at the end of .well-known/openid-configuration. So is there a way to Disable Automatic Issuer Configuration at the Appsync level so that I can stop .well-known/openid-configuration to be added and i can add my metadata document URL provided above directly in the Issuer URL?

asked 21 days ago155 views
1 Answer
0

Hello,

Kindly allow me to share that it is not possible to disable Automatic Issuer Configuration at the AppSync level. AppSync service currently obtains the necessary information for the OIDC configuration through appending “/.well-known/openid-configuration” to the issuer URL and there is no workaround to disable it.

I sincerely regret the inconvenience caused to you due to this.

Thank you.

AWS
SUPPORT ENGINEER
answered 18 days ago
profile picture
EXPERT
reviewed 14 days ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions