How to set up the initial jwkset_path in an OpenID Connection in Elasticsearch

ikakavas · February 20, 2020, 2:38pm

You need to

Either download that file from your OP(google): the JWKS is referenced in https://accounts.google.com/.well-known/openid-configuration and is https://www.googleapis.com/oauth2/v3/certs . So download and save this locally before you start elasticsearch
Or point elasticsearch to the url op.jwkset_path: https://www.googleapis.com/oauth2/v3/certs and we will handle fetching it for you.