[JIRA] (JOIDC-65) JWT client authentication support is incomplete

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *commented* on JOIDC-65 ( https://shibboleth.atlassian.net/browse/JOIDC-65?atlOrigin=eyJpIjoiOTY3ZTBjNGZiMGI0NDc0ZTllYjhlMzRmM2M5ZGNjMzQiLCJwIjoiaiJ9 )

Re: JWT client authentication support is incomplete ( https://shibboleth.atlassian.net/browse/JOIDC-65?atlOrigin=eyJpIjoiOTY3ZTBjNGZiMGI0NDc0ZTllYjhlMzRmM2M5ZGNjMzQiLCJwIjoiaiJ9 )

Just pushed the initial version and tests for improving JWT client authentication as required by the OIDC core spec. To start with, only 'exp', 'iat' and 'aud' claims are validated via ClaimsValidators. Jti replay is included in the ValidateEndpointAuthentication in order to make wiring of ReplayCache straightforward. 'sub' and 'iss' are not currently validated in ValidateEndpointAuthentication, as Nimbus takes care of validating their presence and values as a part of the message decoding. That's verified in the flow tests (token, introspection and revocation).

( https://shibboleth.atlassian.net/browse/JOIDC-65#add-comment?atlOrigin=eyJpIjoiOTY3ZTBjNGZiMGI0NDc0ZTllYjhlMzRmM2M5ZGNjMzQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-65#add-comment?atlOrigin=eyJpIjoiOTY3ZTBjNGZiMGI0NDc0ZTllYjhlMzRmM2M5ZGNjMzQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100187- sha1:76abc0a )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/0e99d91b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-14c87d1d-c7e4-4615-85de-2cbe01b8e059
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/0e99d91b/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-98e8e4ae-9574-4e51-b083-56571f3cb261
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/0e99d91b/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-a48a3e78-ada5-4e4c-baeb-8b0b9c6d30e4
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/0e99d91b/attachment-0005.png>