BARON-SSO 로그인 기능 연동

docker/nginx/default.conf

@@ -31,6 +31,16 @@ server {
                application/json application/javascript;
     gzip_min_length 1000;
 
+    # Expose the backend JWKS document for Baron SSO headless login verification.
+    location = /.well-known/jwks.json {
+        proxy_pass http://backend/.well-known/jwks.json;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_http_version 1.1;
+    }
+
     # Forward all app requests to the frontend container
     location / {
         proxy_pass http://frontend;