update url

id.saladeaula.digital/client/wrangler.toml

@@ -9,7 +9,7 @@ routes = [
 mode = "smart"
 
 [vars]
-ISSUER_URL = "https://58tkjsb308.execute-api.sa-east-1.amazonaws.com"
+ISSUER_URL = "https://duiolq49qn25e.cloudfront.net"
 
 [observability.logs]
 enabled = true

id.saladeaula.digital/template.yaml

@@ -100,3 +100,35 @@ Resources:
             Path: /userinfo
             Method: GET
             ApiId: !Ref HttpApi
+
+  OIDCDistribution:
+    Type: AWS::CloudFront::Distribution
+    Properties:
+      DistributionConfig:
+        Enabled: true
+        Origins:
+          - Id: OidcApiOrigin
+            DomainName: !Sub "${HttpApi}.execute-api.${AWS::Region}.amazonaws.com"
+            CustomOriginConfig:
+              OriginProtocolPolicy: https-only
+        DefaultCacheBehavior:
+          TargetOriginId: OidcApiOrigin
+          ViewerProtocolPolicy: redirect-to-https
+          AllowedMethods: [GET, HEAD, OPTIONS, PUT, PATCH, POST, DELETE]
+          CachedMethods: [GET, HEAD, OPTIONS]
+          ForwardedValues:
+            QueryString: true
+          DefaultTTL: 0
+          MinTTL: 0
+          MaxTTL: 0
+        CacheBehaviors:
+          - PathPattern: "/.well-known/*"
+            TargetOriginId: OidcApiOrigin
+            ViewerProtocolPolicy: redirect-to-https
+            AllowedMethods: [GET, HEAD, OPTIONS]
+            CachedMethods: [GET, HEAD, OPTIONS]
+            ForwardedValues:
+              QueryString: false
+            DefaultTTL: 3600 # 1 hora
+            MinTTL: 300 # 5 min
+            MaxTTL: 86400 # 1 dia