Harrison Sheinblatt created KNOX-3405:
-----------------------------------------
Summary: Extend JWTFederationFilter for dynamic JWKS and iss
attribute on token-exchange
Key: KNOX-3405
URL: https://issues.apache.org/jira/browse/KNOX-3405
Project: Apache Knox
Issue Type: Task
Components: JWT
Reporter: Harrison Sheinblatt
Assignee: Harrison Sheinblatt
Extend JWTFederationFilter in two ways: (1) store the validated token's iss
claim as a request attribute for downstream handlers; and (2) for
grant_type=token-exchange, when the static jwt.expected.issuer check fails,
consult TrustedOidcIssuerService — calling resolveJwksUri() for dynamic-JWKS
issuers, which in turn uses the OIDC discovery document cache.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
