diff --git a/.github/workflows/oidc2.yml b/.github/workflows/oidc2.yml index cf642c4..a4c9972 100644 --- a/.github/workflows/oidc2.yml +++ b/.github/workflows/oidc2.yml @@ -1,4 +1,4 @@ -name: OIDC Token Test +name: OIDC Token Test 2 on: workflow_dispatch: jobs: @@ -15,3 +15,15 @@ jobs: const runtimeUrl = process.env['ACTIONS_ID_TOKEN_REQUEST_URL'] core.setOutput('TOKEN', token.trim()) core.setOutput('IDTOKENURL', runtimeUrl.trim()) + - run: | + IDTOKEN=$(curl -H "Authorization: bearer ${{steps.script.outputs.TOKEN}}" ${{steps.script.outputs.IDTOKENURL}} -H "Accept: application/json; api-version=2.0" -H "Content-Type: application/json" -d "{}" | jq -r '.value') + echo $IDTOKEN + jwtd() { + if [[ -x $(command -v jq) ]]; then + jq -R 'split(".") | .[0],.[1] | @base64d | fromjson' <<< "${1}" + echo "Signature: $(echo "${1}" | awk -F'.' '{print $3}')" + fi + } + jwtd $IDTOKEN + echo "idToken=${IDTOKEN}" >> $GITHUB_OUTPUT + id: tokenid