[JIRA] (JOIDC-122) Support jwk or jku in encrypted JWT headers

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *commented* on JOIDC-122 ( https://shibboleth.atlassian.net/browse/JOIDC-122?atlOrigin=eyJpIjoiMjY3NzFkYmJlMTVhNGJkNzgyNDQ4ODgyMTE1Yzk2N2UiLCJwIjoiaiJ9 )

Re: Support jwk or jku in encrypted JWT headers ( https://shibboleth.atlassian.net/browse/JOIDC-122?atlOrigin=eyJpIjoiMjY3NzFkYmJlMTVhNGJkNzgyNDQ4ODgyMTE1Yzk2N2UiLCJwIjoiaiJ9 )

This code was replaced by new security code in commons. AbstractEncryptTokenAction is no longer used. EncryptJWTHandler is its replacement. EncryptJWTHandler at this stage does also not support setting JWK or JKU. But I am no longer sure about the value of adding those. We need the decryption key local to the IdP anyway, we would not trust those in the headers alone. ‘kid’ provides a sufficient hint as to what is used IMHO.

( https://shibboleth.atlassian.net/browse/JOIDC-122#add-comment?atlOrigin=eyJpIjoiMjY3NzFkYmJlMTVhNGJkNzgyNDQ4ODgyMTE1Yzk2N2UiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-122#add-comment?atlOrigin=eyJpIjoiMjY3NzFkYmJlMTVhNGJkNzgyNDQ4ODgyMTE1Yzk2N2UiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100224- sha1:07bd2b7 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230502/22d9e219/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-1ad6394d-c798-4b56-846c-ecff562d1ca2
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230502/22d9e219/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-09718b70-e54f-4fc5-8998-6c0088a13066
Type: image/png
Size: 448 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230502/22d9e219/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-605ceb81-696f-4dae-b6e8-fc7d39be066f
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230502/22d9e219/attachment-0005.png>