[ 
https://issues.apache.org/jira/browse/KNOX-3423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18109847#comment-18109847
 ] 

ASF subversion and git services commented on KNOX-3423:
-------------------------------------------------------

Commit 1832299cf402365c9ca35199c5748dd9aade9b13 in knox's branch 
refs/heads/master from hanicz
[ https://gitbox.apache.org/repos/asf?p=knox.git;h=1832299cf ]

KNOX-3423: Switch to JSON error messages in Knox token validation paths (#1354)

* KNOX-3424: Switch to JSON error messages in Knox token validation paths

* KNOX-3423: Address review comments

> Switch to JSON error messages in Knox token validation paths
> ------------------------------------------------------------
>
>                 Key: KNOX-3423
>                 URL: https://issues.apache.org/jira/browse/KNOX-3423
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: Server
>    Affects Versions: 3.1.0
>            Reporter: Tamás Hanicz
>            Assignee: Tamás Hanicz
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> RFC 8693 §2.2.2 and RFC 6749 §5.2 require JSON error bodies (\{{{}
> {"error":..., "error_description":...} for token exchange requests. The 
> existing format would break any standards-compliant client. 
> Non-token-exchange paths (normal JWT bearer authentication) use plain text by 
> design and must not be changed.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to