[JIRA] (JOIDC-77) Support resource owner password grant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/JOIDC-77?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 ) JOIDC-77 ( https://shibboleth.atlassian.net/browse/JOIDC-77?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 ) Support resource owner password grant ( https://shibboleth.atlassian.net/browse/JOIDC-77?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 )

Issue Type: New Feature Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 23/Feb/22 8:33 PM Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

No current plans, but filing this as a placeholder in case there’s future demand for it. I did a little bit of napkin design and we’re probably close with the client_credentials branch of the token flow but there are going to be some tricky areas.

We don’t have a great solution to overlap user and OAuth client authn on the same endpoint, but mechanically it would probably work by enabling both “sets” of login flows and applying activation conditions to them to get them turned on and off based on flow and grant type. Ugly but it should work.

The big issue is there’s no real initial RelyingParty here and for consistency with the other grant, we’d want the resource server to be left as the “second” RelyingPartyContext tree. How we’d set things up to process the scope/audience to issue isn’t clear.

Mechanically it’s definitely all there for the most part but the first half of the flow would be different in some ways that will probably emerge once its attempted.

It may end up being the most clean design to stop branching the token flow all over the place and redo it as a set of subflows to run for each grant type.

( https://shibboleth.atlassian.net/browse/JOIDC-77#add-comment?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-77#add-comment?atlOrigin=eyJpIjoiZThhZGZmOWMxOWVmNDM3Y2JmZDM0NGJjNzY2ODhlZWEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100192- sha1:731e729 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220224/6df5030b/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-b8dec73b-2011-4219-ae37-e07cbe4ca988
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220224/6df5030b/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-95d1611d-78eb-4f74-8349-58d745799df6
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220224/6df5030b/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-ad632876-df48-477d-ac09-c2ed827f0fec
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220224/6df5030b/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-93e49ff2-99e5-4dd1-904f-5e1a01e0b150
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220224/6df5030b/attachment-0007.png>