Lev Himmelfarb
Lev Himmelfarb
Those username and URI strings in your logs are not supposed to be empty. You're correct by approaching the problem by enabling FINE logging and inspecting the logs. My recommendation,...
Not sure I follow. If the access token is a JWT, then yes, you can extract all the claims from it. Please explain in more detail.
Theoretically speaking, access tokens are not supposed to be parsed by the application, they should be treated as opaque (even if it's a JWT) and only used for authenticating remote...
The problem is that I can envision a situation when the webapp's login page--the page that, say, shows the button that redirects to the IdP's login page--is not HTTPS. In...
Can the valve's `hostBaseURI` property be used to resolve this issue?