[jira] [Commented] (AMQ-9244) Add JWT authentication plugin

["Lionel Cons (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMQ-9244?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17723012#comment-17723012 ] 

Lionel Cons commented on AMQ-9244:
----------------------------------

[~jbertram], the High Energy Physics community is moving from X.509 certificates to JWT and will need to use JWT to access message brokers. For background information, you can read [https://indico.cern.ch/event/948465/contributions/4323987/attachments/2245676/3808312/2021CHEP_WLCGTokens.pdf] .

As for the clients, maybe they will not need to have explicit JWT support. This is what RabbitMQ does (see [https://www.rabbitmq.com/oauth2.html]):
{quote}Client passes the token as password when connecting to a RabbitMQ node. The username field is ignored.
{quote}
So any client library could use JWT this way...

> Add JWT authentication plugin
> -----------------------------
>
>                 Key: AMQ-9244
>                 URL: https://issues.apache.org/jira/browse/AMQ-9244
>             Project: ActiveMQ
>          Issue Type: Task
>          Components: Security/JAAS
>            Reporter: Jean-Baptiste Onofré
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>             Fix For: 5.19.0, 5.18.2
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)