Add Functionality Enable or Disable ID Token Issuer Validation in My Account and Console

[dhaura]

Purpose

• This PR adds functionality to enable or disable ID Token issuer validation in My Account and Console.

• For the default behavior (tented paths enabled) of the IS, this fix can be ignored.

• But for migrating users, there might be a requirement to use the old Identity Provider Entity Value with tenanted paths disabled. In that case, one of the following configs in deployment.toml can be used for a flawless login for My Account and Console.

  • Skip ID Token Issuer validation by adding the following configurations in deployment.toml.

  [myaccount]
  idp_configs = { "validateIDTokenIssuer" = false }
  
  [console]
  idp_configs = { "validateIDTokenIssuer" = false }

  • Update "issuer" through deployment.toml in order to be consistent with Identity Provider Entity Value.

  [myaccount]
  idp_configs = { "issuer" = "https://localhost:9443/oauth2/oidcdiscovery" }
  
  [console]
  idp_configs = { "issuer" = "https://localhost:9443/oauth2/oidcdiscovery" }

Related Issues

• Myaccount portal is not working with different "Identity Provider Entity ID" value product-is#17956

Related PRs

• Bump SPA SDK Version asgardeo/asgardeo-auth-react-sdk#207
• Add Functionality Enable or Disable ID Token Issuer Validation asgardeo/asgardeo-auth-spa-sdk#160
• Add Functionality Enable or Disable ID Token Issuer Validation asgardeo/asgardeo-auth-js-core#247

[dhaura]

• Since auth-react package bump is a major version bump, the following verify the persistence of the expected behavior of My Account and Console.

  • My Account
  Screen.Recording.2023-12-13.at.14.08.50.mov
  • Console
  Screen.Recording.2023-12-13.at.14.07.39.mov

[pavinduLakshan]

Let's also test and verify the j2 changes by testing the console and myaccount war builds with the pack.

[pavinduLakshan]

Let's send the framework PRs for j2 update as well.

[dhaura]

Let's send the framework PRs for j2 update as well.

• Since the validateIDTokenIssuer config was moved to idpConfigs, there are no j2 changes.