Hello Everyone,
With the above ticket I suggest two enhancements to the JWT handling in framework/security: - we should enable 3rd party JWT issuers to be trusted and handled; IMO this should be a config property that defaults to today’s OFBiz-olny issue when being empty - we should also start handling the RFC 7519 claims within a JWT, esp „sub“(ject) instead of „userLoginId“ which is entirely custom OFBit JWT style Any opinions that I should include in my contribution? Any thoughts? Warm regards Carsten
