[JIRA] (JOIDC-11) Support for client_credentials grant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-11 ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiMGQwNTEzOTE1ZWJkNGEyYThmNzQ2ZmJjMmI2ZGYyNGMiLCJwIjoiaiJ9 )

Re: Support for client_credentials grant ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiMGQwNTEzOTE1ZWJkNGEyYThmNzQ2ZmJjMmI2ZGYyNGMiLCJwIjoiaiJ9 )

Committed changes required to allow unverified clients for this grant type with some tests. There would be more work required to generalize this to the code grant, principally enforcing the response_type values similar to the changes required for grant_type.

TBD is revisiting the introspection/revocation flows. I think we can allow for unverified usage there since authenticating the client should be sufficient to provide a control point and I doubt there’s much use of metadata on those flows as it is.

( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiMGQwNTEzOTE1ZWJkNGEyYThmNzQ2ZmJjMmI2ZGYyNGMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiMGQwNTEzOTE1ZWJkNGEyYThmNzQ2ZmJjMmI2ZGYyNGMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100191- sha1:831671b )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220214/f9afcfeb/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-24f96a2d-4e1a-41ba-91c8-73c9cf1cef86
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220214/f9afcfeb/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-e15008cf-9bf9-4970-838d-0d771f7c2b69
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220214/f9afcfeb/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-fc15ce3d-e21a-429b-8119-eccfd34205ef
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220214/f9afcfeb/attachment-0005.png>