[JIRA] (JOIDC-11) Support for client_credentials grant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-11 ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiMmVlZTkzNDUyZGYwNDQxZmI5MDlhYTM3ODlkZWM5YTQiLCJwIjoiaiJ9 )

Re: Support for client_credentials grant ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiMmVlZTkzNDUyZGYwNDQxZmI5MDlhYTM3ODlkZWM5YTQiLCJwIjoiaiJ9 )

Committed the first draft of an implementation that’s nominally close to complete minus encryption. Totally untested and lacking unit tests. Basis of further work and assessing any refactoring we should do.

Settled on relying on resolved attributes to produce authoritative scope and aud claims but added a way to get at the requested scope and resource values during resolution without much effort so people can do mappings and so forth.

More policy control needed such as the ability to determine whether unencrypted tokens should be issued to unknown resource servers.

Introspection and revocation changes TBD.

( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiMmVlZTkzNDUyZGYwNDQxZmI5MDlhYTM3ODlkZWM5YTQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiMmVlZTkzNDUyZGYwNDQxZmI5MDlhYTM3ODlkZWM5YTQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100188- sha1:ab29722 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220113/60c1e75f/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-b17e04a1-70f5-4094-86c1-87d4a189d267
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220113/60c1e75f/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-9eba1bea-b2f7-4557-a1a6-c1e5a148159a
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220113/60c1e75f/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-2b4ab417-ccb8-4000-a26c-c5b6d391e2b3
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220113/60c1e75f/attachment-0005.png>