func openIDConfigJSON(iss, jwksURI string, keys []interface{}) ([]byte, error) {
	keyset, errs := publicJWKSFromKeys(keys)
	if errs != nil {
		return nil, errs
	}

	metadata := openIDMetadata{
		Issuer:        iss,
		JWKSURI:       jwksURI,
		ResponseTypes: []string{"id_token"}, // Kubernetes only produces ID tokens
		SubjectTypes:  []string{"public"},   // https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes
		SigningAlgs:   getAlgs(keyset),      // REQUIRED by OIDC
	}

	metadataJSON, err := json.Marshal(metadata)
	if err != nil {
		return nil, fmt.Errorf("failed to marshal service account issuer metadata: %v", err)
	}

	return metadataJSON, nil
}
// openIDConfigJSON returns the JSON OIDC Discovery Doc for the service
// account issuer.
openIDConfigJSON returns the JSON OIDC Discovery Doc for the service
account issuer.
// openIDConfigJSON returns the JSON OIDC Discovery Doc for the service // account issuer .
func openIDConfigJSON(iss, jwksURI string, keys []interface{}) ([]byte, error) {
	keyset, errs := publicJWKSFromKeys(keys)
	if errs != nil {
		return nil, errs
	}
	metadata := openIDMetadata{
		Issuer:        iss,
		JWKSURI:       jwksURI,
		ResponseTypes: []string{"id_token"}, 
		SubjectTypes:  []string{"public"},   
		SigningAlgs:   getAlgs(keyset),      
	}
	metadataJSON, err := json.Marshal(metadata)
	if err != nil {
		return nil, fmt.Errorf("failed to marshal service account issuer metadata: %v", err)
	}
	return metadataJSON, nil
}
func openIDConfigJSON ( iss , jwksURI string , keys [ ] interface { } ) ( [ ] byte , error ) { keyset , errs := publicJWKSFromKeys ( keys ) if errs != nil { return nil , errs } metadata := openIDMetadata { Issuer : iss , JWKSURI : jwksURI , ResponseTypes : [ ] string { " " } , SubjectTypes : [ ] string { " " } , SigningAlgs : getAlgs ( keyset ) , } metadataJSON , err := json . Marshal ( metadata ) if err != nil { return nil , fmt . Errorf ( " " , err ) } return metadataJSON , nil }
openIDConfigJSON returns the JSON OIDC Discovery Doc for the service
account issuer.
openIDConfigJSON returns the JSON OIDC Discovery Doc for the service account issuer .
// Kubernetes only produces ID tokens // https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes // REQUIRED by OIDC