-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Open
Description
The purpose here is to add a new JAAS LoginModule allowing authentication based on JWT.
We can use Nimbus JWT dependency to deal with that.
The idea is:
- Introduce a new
OAuth2LoginModuleto be used by theJaasAuthenticationPlugin, similar to the existingPropertiesLoginModuleorLDAPLoginModule. - Validates tokens locally, to avoid systematic call to the IdP on every connection.
- The OAuth2 configuration (issuer, claim, etc) is defined in the
conf/login.configas otherLoginModules. - The user pass the token as "password"
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels