[JIRA] (JOIDC-122) Support jwk or jku in encrypted JWT headers

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/JOIDC-122?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 ) JOIDC-122 ( https://shibboleth.atlassian.net/browse/JOIDC-122?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 ) Support jwk or jku in encrypted JWT headers ( https://shibboleth.atlassian.net/browse/JOIDC-122?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 )

Issue Type: Improvement Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Security Created: 04/Aug/22 10:37 AM Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )

Probably low priority, but I can not see the OP supporting adding the ‘jwk’ or ‘jku’ to the headers of a JWE, only adding the ‘kid’. That is, to explicitly specify the public key to which the JWE was encrypted. This can be later used by an RP to locate the correct private key.

( https://shibboleth.atlassian.net/browse/JOIDC-122#add-comment?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-122#add-comment?atlOrigin=eyJpIjoiMjVjYWVmNGJhNDIxNDg3Y2JmMDAxMzZmZDFmZDJhMzIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100204- sha1:d476756 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220804/ea94416b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-793ec0fc-d8dd-467f-9f7d-65a9651e5de5
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220804/ea94416b/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-8ab40182-5fea-4cbe-a295-6d93800cbeb4
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220804/ea94416b/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-5dbb9f89-da23-4ab7-ae11-629b95bbf8e5
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220804/ea94416b/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-98f70e88-e13a-465f-8037-a0eb582e5745
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220804/ea94416b/attachment-0007.png>