You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@causeway.apache.org by "Daniel Keir Haywood (Jira)" <ji...@apache.org> on 2024/05/12 14:43:00 UTC

[jira] [Updated] (CAUSEWAY-3742) Improve security/oauth ; deprecate AuthenticationStrategyJwt

     [ https://issues.apache.org/jira/browse/CAUSEWAY-3742?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Keir Haywood updated CAUSEWAY-3742:
------------------------------------------
    Attachment:     (was: AuthenticationManagerForApplicationUsers-1.java)

> Improve security/oauth ; deprecate AuthenticationStrategyJwt
> ------------------------------------------------------------
>
>                 Key: CAUSEWAY-3742
>                 URL: https://issues.apache.org/jira/browse/CAUSEWAY-3742
>             Project: Causeway
>          Issue Type: Improvement
>          Components: Ext Sec spring-oauth2, Security Spring
>    Affects Versions: 2.0.0
>            Reporter: Daniel Keir Haywood
>            Assignee: Daniel Keir Haywood
>            Priority: Minor
>             Fix For: 2.1.0
>
>         Attachments: AuthConverterForUserDetails.java, AuthenticationManagerForApplicationUsers.java, AuthenticationStrategyUsingCurrentInteractionContext.java
>
>
> Implementation of an AuthenticationManager (Spring SPI) that works for both oauth and jwt tokens, also our own SPI of AuthConverter.
> And, for Restful, a do-nothing AuthenticationStrategy that uses the above (rather than doing any validation in and of itself).



--
This message was sent by Atlassian Jira
(v8.20.10#820010)