lh0156 commented on PR #22298: URL: https://github.com/apache/kafka/pull/22298#issuecomment-5159309030
Follow-up on the blank scope behavior: I adopted the suggested RFC-consistent behavior. Whitespace-only string-valued scope claims now produce an empty scope set in both the broker and client JWT validators, matching the parser and unsecured-JWS behavior. The regression tests were changed first and reproduced the previous validation failure (RED); implementation commit `d91a575747` makes both tests pass (GREEN). Verification: - targeted blank-scope tests for BrokerJwtValidator and ClientJwtValidator passed - the existing parser, secured-validator, and unsecured-JWS coverage remains in place @kirktrue, please re-review the updated behavior. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
