[JIRA] (JOIDCRP-17) Add JWT Encryption Parameter Resolver Support
Philip Smart (Jira)
jira at shibboleth.atlassian.net
Tue Jul 12 09:28:13 UTC 2022
Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue
IdP Plugin - OIDC RP ( https://shibboleth.atlassian.net/browse/JOIDCRP?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/JOIDCRP-17?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 ) JOIDCRP-17 ( https://shibboleth.atlassian.net/browse/JOIDCRP-17?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 ) Add JWT Encryption Parameter Resolver Support ( https://shibboleth.atlassian.net/browse/JOIDCRP-17?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 )
Issue Type: New Feature Assignee: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) Components: oidc-rp-impl Created: 12/Jul/22 5:28 AM Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )
The request object can be encrypted. The only thing left to add for RP JWT signature and decryption config is to wire up encryption support.
The OP has various places it supports JWT encryption so we could generalize some of that into commons. However, I will start off with it in the RP.
I am slightly confused at the moment why parameters for signature signing, validation, and decryption are passed around in the SecurityParametersContext, but encryption has its own EncryptionContext. I will keep looking.
( https://shibboleth.atlassian.net/browse/JOIDCRP-17#add-comment?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-17#add-comment?atlOrigin=eyJpIjoiZTI5YzkyY2I4NDBmNDk0NWI1MTIzZjhhYzg0YzRmMjkiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:7f0496f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220712/a697d0b0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-60e146ca-e383-4016-81ac-652711d5df8e
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220712/a697d0b0/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b957c35c-9720-4b7d-8b76-93965567f80f
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220712/a697d0b0/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-bcbbaafc-37a2-4ea5-b788-eaef1f261b55
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220712/a697d0b0/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f87358e3-5852-4c1e-ba28-789609e3ce11
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220712/a697d0b0/attachment-0007.png>
More information about the commits
mailing list