[JIRA] (JOIDC-65) JWT client authentication support is incomplete

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *resolved* as *Fixed*

The JWT validation for client authentication (token, introspection and revocation endpoints) is now done according to the OIDC core specification. Some verifications were (and still are) already done by the Nimbus message decoder, but in order to be not dependent on that, the validation is repeated during ValidateEndpointAuthentication action via ClaimsValidators.

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-65?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 ) JOIDC-65 ( https://shibboleth.atlassian.net/browse/JOIDC-65?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 ) JWT client authentication support is incomplete ( https://shibboleth.atlassian.net/browse/JOIDC-65?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 )

Change By: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Resolution: Fixed Status: Open Resolved

( https://shibboleth.atlassian.net/browse/JOIDC-65#add-comment?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-65#add-comment?atlOrigin=eyJpIjoiOWI2YzBkYzAwYTIwNGI4M2I5ZjI2ZjE5NTg3ZTIyMmMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100187- sha1:76abc0a )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220103/5678e32f/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c2475ef9-0d0f-4bc3-b73b-cb5ffd574461
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220103/5678e32f/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-15fa4a92-6cb0-4acc-9e32-6d85a814a8f3
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220103/5678e32f/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-0f3db198-5115-4a5a-b332-8dc845904d8b
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220103/5678e32f/attachment-0005.png>