[JIRA] (JCOMOIDC-53) Add access token at_hash validator

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue

Java Common OIDC Library ( https://shibboleth.atlassian.net/browse/JCOMOIDC?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/JCOMOIDC-53?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 ) JCOMOIDC-53 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-53?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 ) Add access token at_hash validator ( https://shibboleth.atlassian.net/browse/JCOMOIDC-53?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 )

Issue Type: Task Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Security Created: 01/Dec/22 5:10 AM Fix Versions: 2.2.0 Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )

Add the OPTIONAL at_hash validator for the Auth Code flow. Given it is optional, a missing at_hash value in the id_token can be allowed by configuration. However, if it does exist in the id_token, it will be checked.

( https://shibboleth.atlassian.net/browse/JCOMOIDC-53#add-comment?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-53#add-comment?atlOrigin=eyJpIjoiOWI1MTNjYzcxYzVjNDE0MTgyNTY1Y2M1Mzk2YjIzZTUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100211- sha1:6a2b617 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221201/056990d9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c6f9c0f5-bc5a-4779-a93e-7f187f146526
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221201/056990d9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-e8aefd92-320c-42b3-be67-809adcc748d1
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221201/056990d9/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-df583b19-1938-400c-9a23-aefd3c44ec79
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221201/056990d9/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-e945363c-f724-4078-9d7b-18d158fdafbb
Type: image/png
Size: 484 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221201/056990d9/attachment-0007.png>