是否可以在通过命令行创建之前运行发现 AWS Cognito OIDC IdP？

如何解决是否可以在通过命令行创建之前运行发现 AWS Cognito OIDC IdP？

在 AWS Cognito OIDC IdP 页面上，可以在创建提供商之前Run discovery：

有没有办法通过命令行来做到这一点？

解决方法

不，您不能使用 AWS CLI 执行此操作，但您可以直接使用（例如 curl）调用提供程序。我只是在 auth0 上创建了一个测试 OIDC 应用程序：

curl https://example.auth0.com/.well-known/openid-configuration

{
  "issuer":"https://example.auth0.com/","authorization_endpoint":"https://example.auth0.com/authorize","token_endpoint":"https://example.auth0.com/oauth/token","device_authorization_endpoint":"https://example.auth0.com/oauth/device/code","userinfo_endpoint":"https://example.auth0.com/userinfo","mfa_challenge_endpoint":"https://example.auth0.com/mfa/challenge","jwks_uri":"https://example.auth0.com/.well-known/jwks.json","registration_endpoint":"https://example.auth0.com/oidc/register","revocation_endpoint":"https://example.auth0.com/oauth/revoke","scopes_supported":[
    "openid","profile","offline_access","name","given_name","family_name","nickname","email","email_verified","picture","created_at","identities","phone","address"
  ],"response_types_supported":[
    "code","token","id_token","code token","code id_token","token id_token","code token id_token"
  ],"code_challenge_methods_supported":[
    "S256","plain"
  ],"response_modes_supported":[
    "query","fragment","form_post"
  ],"subject_types_supported":[
    "public"
  ],"id_token_signing_alg_values_supported":[
    "HS256","RS256"
  ],"token_endpoint_auth_methods_supported":[
    "client_secret_basic","client_secret_post"
  ],"claims_supported":[
    "aud","auth_time","exp","iat","iss","phone_number","sub"
  ],"request_uri_parameter_supported":false
}

.well-known/openid-configuration 路径是 OIDC 协议的一部分，必须定义并返回正确的 JSON 文档。