[jira] [Created] (NIFI-8408) Oidc Identity Provider should support assertions as client credentials for authenticating against the token endpoint

["Vijay Jammi (Jira)" <ji...@apache.org>]

Vijay Jammi created NIFI-8408:
---------------------------------

             Summary: Oidc Identity Provider should support assertions as client credentials for authenticating against the token endpoint
                 Key: NIFI-8408
                 URL: https://issues.apache.org/jira/browse/NIFI-8408
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Core Framework, Security
    Affects Versions: 1.11.4
            Reporter: Vijay Jammi


The current oidc client authentication methods (client_secret_post, client_secret_basic) require client credentials (client_secret) to be stored as plain text on the client's filesystem, which could also be inadvertently checked into source control system.

Due to these and other security considerations, we should be able to use assertions as client credentials for authenticating against the token endpoint.

 

 

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)