[JIRA] (JOIDC-11) Support for client_credentials grant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-11 ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiZTkzMTdjYjVkZmJmNDcxYjkyMGUwOWYyNTE2ODM4ODAiLCJwIjoiaiJ9 )

Re: Support for client_credentials grant ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiZTkzMTdjYjVkZmJmNDcxYjkyMGUwOWYyNTE2ODM4ODAiLCJwIjoiaiJ9 )

I think the ValidateEndpointAuthentication action is actually what we need to rework, but we’ll have to consider the implications on the grant types downstream.

The master authn flow has been fixed to allow reuse by this endpoint without colliding with the session or enabled login flow assumptions that apply to user facing authn, so it should be usable now as the driver for this endpoint.

My thought right now is that we build a new flow based on the Nimbus ClientAuthentication abstraction and plug in the CredentialValidator API used in the Password flow now to support more general validation of the client secret.

( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiZTkzMTdjYjVkZmJmNDcxYjkyMGUwOWYyNTE2ODM4ODAiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiZTkzMTdjYjVkZmJmNDcxYjkyMGUwOWYyNTE2ODM4ODAiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:f6eba4b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211213/29a6c49d/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-51564e7e-0cb0-4021-bc7f-a96300831ff3
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211213/29a6c49d/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-034dd153-c9b5-4708-8f2f-9e8255cb9a42
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211213/29a6c49d/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f8b7fb53-cfd8-4729-9dca-dfbbdbf46337
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211213/29a6c49d/attachment-0005.png>