[JIRA] (JOIDC-64) Refactor client authentication on OAuth2 endpoints into a login flow

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-64 ( https://shibboleth.atlassian.net/browse/JOIDC-64?atlOrigin=eyJpIjoiY2UwMWQ0YzcyMzEzNDhjZGFmY2NjYTQ1NzIyZWNhMWQiLCJwIjoiaiJ9 )

Re: Refactor client authentication on OAuth2 endpoints into a login flow ( https://shibboleth.atlassian.net/browse/JOIDC-64?atlOrigin=eyJpIjoiY2UwMWQ0YzcyMzEzNDhjZGFmY2NjYTQ1NzIyZWNhMWQiLCJwIjoiaiJ9 )

Initial work is done minus JWT validators, disabled two tests for now. Discovered that introspection and revocation flows don’t appear to actually allow for JWT methods right now anyway, waiting to port up work on that from the 3.0 branch once that’s done and tested.

Have not tested actually plugging in LDAP/etc. instead of the clientinfo option for the moment, but mechanically no reason it won’t work fine.

Other login flows would work in principle but that isn’t likely to be a need unless something unusual comes along. Building CredentialValidators is generally easier and this flow assumes that they can be based on things other than username/password when required.

( https://shibboleth.atlassian.net/browse/JOIDC-64#add-comment?atlOrigin=eyJpIjoiY2UwMWQ0YzcyMzEzNDhjZGFmY2NjYTQ1NzIyZWNhMWQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-64#add-comment?atlOrigin=eyJpIjoiY2UwMWQ0YzcyMzEzNDhjZGFmY2NjYTQ1NzIyZWNhMWQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100187- sha1:986b9bc )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211221/9f8675fd/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-3ce76315-5bb4-4044-8dd9-ed209fbc9d30
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211221/9f8675fd/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-ce428ba6-2231-4964-b47b-801e6a6361c4
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211221/9f8675fd/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-5eabdca4-c467-47da-9558-a2f0b28d5a4e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211221/9f8675fd/attachment-0005.png>