dabloem commented on pull request #5: URL: https://github.com/apache/geronimo-jwt-auth/pull/5#issuecomment-762896321
> Hi, two open questions: > > 1. What about jsonpatch option instead of group alias? Sounds saner to me > 2. Wat about multi key/jwt apps, shouldnt it be a map with the keyid as key (with a default)? > Otherwise looks good 1. I don't fully understand what you mean. Maybe a simple gist? 2. I don't know. I haven't seen it in other impl's (smallrye-liberty). And, is there such a use case, that the same app, receives different jwt's, signed with the same private key? What I do like, is the hierarchy to locatie the groups claim. The example Token1.json in the tck includes an example with customObject. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org
