keycloak Pluggable Features of Token Manager

Closes #12065

Jun 17 '22 05:06 tnorimat

The PR provides keycloak users with capability of adding their own features to token generation in the pluggable way, namely client policies' executors/conditions.

The PR provides the following arquillian integration tests:

enforcing DPoP regardless of DPoP and MTLS sender constraint token settings.
suppressing refresh token rotation, which is required by Open Banking Brazil FAPI 1.0 security profile Implementer's Draft 3 and FAPI 2.0 baseline.

Jun 17 '22 05:06 tnorimat

@tnorimat do you have a date, to merge this branch to master ?

Sep 23 '22 13:09 evertongodoi

@evertongodoi Hello, this PR is under review. I will rebase the PR on the latest master because the the PR has conflicts with the latest master branch.

Sep 27 '22 00:09 tnorimat

@mposolda I have fixed the PR as you suggested. Could you check it?

Oct 06 '22 01:10 tnorimat

@mposolda I will create follow-up GH issue and the follow-up PR.

Oct 07 '22 07:10 tnorimat

@tnorimat Thanks!

Oct 07 '22 07:10 mposolda

@mposolda I have created the follow-up issue (https://github.com/keycloak/keycloak/issues/14795).

Oct 07 '22 09:10 tnorimat

@tnorimat Thanks for creating follow-up issue!

Oct 12 '22 09:10 mposolda