[
https://issues.apache.org/jira/browse/KNOX-3408?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18103415#comment-18103415
]
ASF subversion and git services commented on KNOX-3408:
-------------------------------------------------------
Commit 5066017a803737543db1e384458ef04745e7c098 in knox's branch
refs/heads/knox_idf from hsheinblatt
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=5066017a8 ]
KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange
(#1339)
* KNOX-3408 - Regression tests for subject handling in
JWTFederationFilter.handleTokenExchange and
TokenExchangePrincipal handling in
AbstractIdentityAssertionFilter#continueChainAsPrincipal handling
Only unit tests are added for existing functionality.
* KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange.
---------
Co-authored-by: Harrison <[email protected]>
> JWTFederationFilter.handleTokenExchange to allow missing actor token for RFC
> 8693 OIDC token exchange
> -----------------------------------------------------------------------------------------------------
>
> Key: KNOX-3408
> URL: https://issues.apache.org/jira/browse/KNOX-3408
> Project: Apache Knox
> Issue Type: Task
> Components: JWT
> Reporter: Harrison Sheinblatt
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> In RFC 8693 the actor token is optional, so the filter must allow token
> exchange to continue if there is no actor token. We will not use
> TokenExchangePrincipal in that case, leaving the headless delegation case for
> a future task.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
