[JIRA] (JOIDCRP-29) Support client_secret_jwt and private_key_jwt client authentication

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue

IdP Plugin - OIDC RP ( https://shibboleth.atlassian.net/browse/JOIDCRP?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/JOIDCRP-29?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 ) JOIDCRP-29 ( https://shibboleth.atlassian.net/browse/JOIDCRP-29?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 ) Support client_secret_jwt and private_key_jwt client authentication ( https://shibboleth.atlassian.net/browse/JOIDCRP-29?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 )

Issue Type: New Feature Affects Versions: 1.0.0 Assignee: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) Created: 16/May/23 4:23 AM Fix Versions: 2.0.0 Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )

The RP only currently supports client_secret_basic and client_secret_basic client authentication methods. We should add client_secret_jwt and private_key_jwt authentication methods.

client_secret_jwt should be the simplest, everything is in place for this to happen.

private_key_jwt will need access to the credential resolvers. If we do that, client_secret_jwt should also use the resolvers rather than just pulling it out of the profile config (which is where the resolvers will take it from, but at least then it is extensible).

( https://shibboleth.atlassian.net/browse/JOIDCRP-29#add-comment?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-29#add-comment?atlOrigin=eyJpIjoiNGM5MjAxNDU4MjFiNDlkMDlkMDc1ZjM3OWUxYjc3OWQiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:6805d32 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230516/2af092f0/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-094f7de2-35f3-4060-bf03-5c7a58d066a7
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230516/2af092f0/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-1f02d317-c591-4983-978f-c2ed5d012e0e
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230516/2af092f0/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-09bcb553-ade8-4e58-b6cc-4deb4eff5756
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230516/2af092f0/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-5b0795c8-6e7d-4203-9d8b-3ce7964dfaef
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230516/2af092f0/attachment-0007.png>