Re: [Dev] Support for encrypted ID tokens in OIDC

2018-03-06 Thread Vihanga Liyanage
Hi all, [Update] I have completed the second phase of the project, providing service provider level configurations in admin dashboard to configure encryption algorithm and encryption method. With this update, once you enable encrypting id tokens for an SP in the admin dashboard, two select boxes w

Re: [Dev] Support for encrypted ID tokens in OIDC

2018-02-20 Thread Vihanga Liyanage
Hi all, [Update] I was able to complete the initial development of the proposed project, encrypted id token support in OIDC flow. Following are the links related to the development. - An issue was created in product-is repository to track the development. - https://github.com/wso2/produc

Re: [Dev] Support for encrypted ID tokens in OIDC

2018-02-09 Thread Vihanga Liyanage
Yes, Farasath. As for the offline discussions with Drashana, I came to the same conclusion and exploring the SAML sample app right now. Although I'm not sure about signing JWE. I couldn't find anything specific about that in the RFC. Also, the API in Nimbus only expects the claims set and the publ

Re: [Dev] Support for encrypted ID tokens in OIDC

2018-02-09 Thread Farasath Ahamed
On Friday, February 9, 2018, Vihanga Liyanage wrote: > [- Engineering, Strategy] > [+ Architecture, Dev] > > Thanks, > Vihanga > > On Fri, Feb 9, 2018 at 8:56 AM, Vihanga Liyanage wrote: > >> Hi Farasath, >> >> For the above two points IMO it would be better to provide an option at >>> Service P

Re: [Dev] Support for encrypted ID tokens in OIDC

2018-02-08 Thread Vihanga Liyanage
[- Engineering, Strategy] [+ Architecture, Dev] Thanks, Vihanga On Fri, Feb 9, 2018 at 8:56 AM, Vihanga Liyanage wrote: > Hi Farasath, > > For the above two points IMO it would be better to provide an option at >> Service Provider OAuth/OIDC configuration. This will be similar to what we >> hav