[JIRA] (JOIDC-90) Revocation of individual tokens

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *commented* on JOIDC-90 ( https://shibboleth.atlassian.net/browse/JOIDC-90?atlOrigin=eyJpIjoiZTc2NDUxM2FjY2Q2NDVlYWJlNzMzMDM3YmExNzBmMGUiLCJwIjoiaiJ9 )

Re: Revocation of individual tokens ( https://shibboleth.atlassian.net/browse/JOIDC-90?atlOrigin=eyJpIjoiZTc2NDUxM2FjY2Q2NDVlYWJlNzMzMDM3YmExNzBmMGUiLCJwIjoiaiJ9 )

New *RootTokenIdRevocationValidator* verifies if the token chain has been revoked. The previously existing JWTIDRevocationClaimsValidator now checks the individual token revocation context. Both validators are needed in the claims validator sets for userinfo and introspection endpoints.

Also improved flow tests for token, userinfo and introspection flows regarding revoked tokens.

( https://shibboleth.atlassian.net/browse/JOIDC-90#add-comment?atlOrigin=eyJpIjoiZTc2NDUxM2FjY2Q2NDVlYWJlNzMzMDM3YmExNzBmMGUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-90#add-comment?atlOrigin=eyJpIjoiZTc2NDUxM2FjY2Q2NDVlYWJlNzMzMDM3YmExNzBmMGUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100201- sha1:004587f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220616/bfe89a5e/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-e331e75c-9725-4cc9-867e-4219a5a6173a
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220616/bfe89a5e/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-2d15959f-f29c-4a3d-988b-419d8b45865e
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220616/bfe89a5e/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-6a508d24-d59f-4fd7-bc26-9275d596cdc6
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220616/bfe89a5e/attachment-0005.png>