[jira] [Commented] (KNOX-3405) Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/KNOX-3405?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18103997#comment-18103997 ] 

ASF subversion and git services commented on KNOX-3405:
-------------------------------------------------------

Commit 705d27e9f7837ca90137a232575daa1f41e63329 in knox's branch refs/heads/knox_idf from hsheinblatt
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=705d27e9f ]

KNOX-3405 - Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange (#1342)

> Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange
> -------------------------------------------------------------------------------
>
>                 Key: KNOX-3405
>                 URL: https://issues.apache.org/jira/browse/KNOX-3405
>             Project: Apache Knox
>          Issue Type: Task
>          Components: JWT
>            Reporter: Harrison Sheinblatt
>            Assignee: Harrison Sheinblatt
>            Priority: Major
>          Time Spent: 1h 10m
>  Remaining Estimate: 0h
>
> Extend JWTFederationFilter in two ways: (1) store the validated token's iss claim as a request attribute for downstream handlers; and (2) for grant_type=token-exchange, when the static jwt.expected.issuer check fails, consult TrustedOidcIssuerService — calling resolveJwksUri() for dynamic-JWKS issuers, which in turn uses the OIDC discovery document cache.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)