[JIRA] (JOIDC-7) Support JWT access tokens for code or implicit grants

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *commented* on JOIDC-7 ( https://shibboleth.atlassian.net/browse/JOIDC-7?atlOrigin=eyJpIjoiNWIyMjExMWNlMDdmNGE3MGJjNTZiNTI3ZDRhOTgxZDUiLCJwIjoiaiJ9 )

Re: Support JWT access tokens for code or implicit grants ( https://shibboleth.atlassian.net/browse/JOIDC-7?atlOrigin=eyJpIjoiNWIyMjExMWNlMDdmNGE3MGJjNTZiNTI3ZDRhOTgxZDUiLCJwIjoiaiJ9 )

Successfully run the Basic Certification Profile (ie. code-flow) on the OIDC certification suite. Also some selected tests for the hybrid profile were successful. In all test, the test suite RP was configured statically via following SAML metadata:

   <md:EntityDescriptor entityID="cert1">

       <md:Extensions>
           <mdattr:EntityAttributes>
               <saml:Attribute Name="http://shibboleth.net/ns/profiles/accessTokenType"
                   NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">
                   <saml:AttributeValue>JWT</saml:AttributeValue>
               </saml:Attribute>
           </mdattr:EntityAttributes>
       </md:Extensions>

       <md:SPSSODescriptor xmlns:oidcmd="urn:mace:shibboleth:metadata:oidc:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" protocolSupportEnumeration="http://openid.net/specs/openid-connect-core-1_0.html">

           <md:Extensions>
               <oidcmd:OAuthRPExtensions
                   grant_types="authorization_code"
                   response_types="code code+id_token code+token"
                   token_endpoint_auth_method="client_secret_basic"
                   scopes="openid profile email phone offline_access address"/>
               <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
                   <mdui:DisplayName xml:lang="en">Test Application (SAML-metadata configuration for OIDC)</mdui:DisplayName>
               </mdui:UIInfo>
           </md:Extensions>
           <md:KeyDescriptor>
               <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
                   <ds:KeyName>mockSecret</ds:KeyName>
                   <oidcmd:ClientSecret>changeit</oidcmd:ClientSecret>
               </ds:KeyInfo>
           </md:KeyDescriptor>
           <md:NameIDFormat>public</md:NameIDFormat>
           <md:AssertionConsumerService
                   Binding="https://tools.ietf.org/html/rfc6749#section-3.1.2"
                   Location="https://www.certification.openid.net/test/a/3_2_0-snapshot/callback"
                   index="1"/>
       </md:SPSSODescriptor>

   </md:EntityDescriptor>

( https://shibboleth.atlassian.net/browse/JOIDC-7#add-comment?atlOrigin=eyJpIjoiNWIyMjExMWNlMDdmNGE3MGJjNTZiNTI3ZDRhOTgxZDUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-7#add-comment?atlOrigin=eyJpIjoiNWIyMjExMWNlMDdmNGE3MGJjNTZiNTI3ZDRhOTgxZDUiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100201- sha1:66eda1f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220628/df18e654/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-31b217be-9582-480b-9b49-5f1d221dbf14
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220628/df18e654/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-c4b72a19-197c-4dd4-b870-8bcbfd66507b
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220628/df18e654/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ae904914-0a11-46c5-a005-e00042e2f5f4
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220628/df18e654/attachment-0005.png>