id: oidc-detect
info:
name: Detect OpenID Connect provider
author: jarijaas
severity: info
description: Detects OpenID Connect providers. See https://en.wikipedia.org/wiki/OpenID_Connect
metadata:
max-request: 1
tags: tech,oidc
http:
- method: GET
path:
- "{{BaseURL}}/.well-known/openid-configuration"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- issuer
- authorization_endpoint
condition: and
# digest: 4a0a00473045022100a182d940792e68b972fca7ce4f405b0187f6e30b8b84dc2cba497783df7145a902202233850bc05b87f58ef19d86222f0bdd31796e5abaec136ce8dbebd924717899:922c64590222798bb761d5b6d8e72950