[JIRA] (JCOMOIDC-45) Add a Decrypter for JWE tokens similar to the opensaml Decrypter

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *commented* on JCOMOIDC-45 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-45?atlOrigin=eyJpIjoiZDYyZWE0ZGVlNWQzNDM2ZTk0NTJhMjUyYzc2ODdjMWIiLCJwIjoiaiJ9 )

Re: Add a Decrypter for JWE tokens similar to the opensaml Decrypter ( https://shibboleth.atlassian.net/browse/JCOMOIDC-45?atlOrigin=eyJpIjoiZDYyZWE0ZGVlNWQzNDM2ZTk0NTJhMjUyYzc2ODdjMWIiLCJwIjoiaiJ9 )

Updated the BasicJOSEObjectCredentialResolver to allow for an extension point for post-processing credentials (like the SAML BasicProviderKeyInfoCredentialResolver ).

Updated the LocalJOSEObjectCredentialResolver to implement the post-processing credentials extension point (similar to the LocalKeyInfoCredentialResolver ). The resolver attempts to find local credentials based on matching public keys (with or without a ‘kid’ if available), in addition to local credentials resolved from ‘kid’ alone. Both are added to a list of returned credentials - duplicate credentials (same public and private keys) are removed.

Removed the ‘kid’ criterion from the JWTDecrypter, because that is now handled by the LocalJOSEObjectCredentialResolver specifically, rather than being applied across all resolvers.

( https://shibboleth.atlassian.net/browse/JCOMOIDC-45#add-comment?atlOrigin=eyJpIjoiZDYyZWE0ZGVlNWQzNDM2ZTk0NTJhMjUyYzc2ODdjMWIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-45#add-comment?atlOrigin=eyJpIjoiZDYyZWE0ZGVlNWQzNDM2ZTk0NTJhMjUyYzc2ODdjMWIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100205- sha1:4a5192e )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220823/56d8fb00/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-f3d67a95-6448-4f75-a914-0ca5fafcb287
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220823/56d8fb00/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-d7382b1b-0ba7-44ac-b85c-a12245bc9b9d
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220823/56d8fb00/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-0be10ecf-b0e0-482d-8141-834471df8855
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220823/56d8fb00/attachment-0005.png>