security icon indicating copy to clipboard operation
security copied to clipboard

Add OpenId test for deferred expression

Open OndroMih opened this issue 3 years ago • 0 comments

According to the specification, deferred expression is supported everywhere, where an EL is supported.

The test can be a copy of https://github.com/jakartaee/security/blob/master/tck/app-openid/src/main/java/ee/jakarta/tck/security/test/client/defaulttests/SecuredServletWithEL.java but use a deferred expession.

For example, a user can choose which provider to use to authenticate. In that case, a deferred EL should be used for configuration values related to OpenID Provider, such as providerURI, clientId, clientSecret, in order to choose the provider configuration based on user's decision.

If deferred expressions don't make sense (for example in useSession attribute), the javadoc should clarify that.

OndroMih avatar Apr 01 '22 09:04 OndroMih