[JIRA] (JOIDC-11) Support for client_credentials grant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on JOIDC-11 ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiYjRkODQ5YjUxZDk4NGY3MDk5MmRlYjNlODUzNWZkODEiLCJwIjoiaiJ9 )

Re: Support for client_credentials grant ( https://shibboleth.atlassian.net/browse/JOIDC-11?atlOrigin=eyJpIjoiYjRkODQ5YjUxZDk4NGY3MDk5MmRlYjNlODUzNWZkODEiLCJwIjoiaiJ9 )

Re-implemented introspection flow with JWT support and generalized it. Using ClaimsValidator API now for both opaque and JWT format tokens. More tests needed.

Attempted to fix limitation on signing keys so non-JWK creds can be used for verification.

Implemented sufficient control by requiring the requester’s identity to match either the client_id or one of the audiences in the token. Should address both client or a valid resource server using the endpoint, provided people do the right thing and implement the logical identity of the resource server into the audience. Needs to be documented.

( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiYjRkODQ5YjUxZDk4NGY3MDk5MmRlYjNlODUzNWZkODEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-11#add-comment?atlOrigin=eyJpIjoiYjRkODQ5YjUxZDk4NGY3MDk5MmRlYjNlODUzNWZkODEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100189- sha1:c51f787 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220126/1eaf82dd/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-6bba5e72-75b1-475a-a84e-84f484288c74
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220126/1eaf82dd/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-aa4cdca1-0a9f-49a8-9bdb-d8949aad1536
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220126/1eaf82dd/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-3e85d8d1-6283-4e29-9cee-df1990064d44
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220126/1eaf82dd/attachment-0005.png>