[JIRA] (JOIDC-7) Support JWT access tokens for authorization_code or implicit grants

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-7 ( https://shibboleth.atlassian.net/browse/JOIDC-7?atlOrigin=eyJpIjoiYWMzYjc0ODBmYzg1NGMxYjllZGRiNDk0MmY1NWIxNmIiLCJwIjoiaiJ9 )

Re: Support JWT access tokens for authorization_code or implicit grants ( https://shibboleth.atlassian.net/browse/JOIDC-7?atlOrigin=eyJpIjoiYWMzYjc0ODBmYzg1NGMxYjllZGRiNDk0MmY1NWIxNmIiLCJwIjoiaiJ9 )

Starting review of the changes needed for this.

* Current access token validation assumes there’s no audience claim (implying the OP is the only audience). This will have to get reworked, and the access tokens built with an audience that includes the OP if that’s a requirement in addition to any external resource servers.

( https://shibboleth.atlassian.net/browse/JOIDC-7#add-comment?atlOrigin=eyJpIjoiYWMzYjc0ODBmYzg1NGMxYjllZGRiNDk0MmY1NWIxNmIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-7#add-comment?atlOrigin=eyJpIjoiYWMzYjc0ODBmYzg1NGMxYjllZGRiNDk0MmY1NWIxNmIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100198- sha1:943baf4 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220413/06ec8412/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-4d82100e-dd96-431d-9760-e4a8ab5cec5b
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220413/06ec8412/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-7568cc71-cdd6-419f-b8f5-09d19c960901
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220413/06ec8412/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-305e21d3-d0fc-4976-9edb-d82068d8d27a
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220413/06ec8412/attachment-0005.png>