Paulo Lopes

More info: https://redthunder.blog/2017/06/08/jwts-jwks-kids-x5ts-oh-my/

`kid` is the prefered value and we should fallback to `x5t` is the key is a `x5c` and has no `kid`.

Currently, we support level 1. With level 2, we should deprecate the boolean config option and add the enumeration. For backwards compatibility, we should follow the recommendation of the boolean...

The flow should not be needed for discovery, the idea is that during discovery we collect all allowed flows from the discovery itself. Then when authenticating you specify the flow...

@UkonnRa can you point me to the documentation on the `.well-known` openid connect for this provider? it would be interesting to add it as you reported that it showed some...

@jonathon-eastman I'm having some trouble to figure out what the issue is. Could you set up an account where I can connect to a try to debug the application? You...

Implicit is not expected to be used by server, but may be interesting for `webClient`

@pendula95 yes, I did try to see if quickly remove the single entry would be trivial, but the assumption that there is a single flow is used internally in several...

Yes. * https://github.com/vert-x3/vertx-auth/blob/master/vertx-auth-oauth2/src/main/java/io/vertx/ext/auth/oauth2/Oauth2Credentials.java should have a new field to specify the flow * https://github.com/vert-x3/vertx-auth/blob/master/vertx-auth-oauth2/src/main/java/io/vertx/ext/auth/oauth2/OAuth2Options.java should deprecate setting the flow With those in place, start replacing all usages of the deprecated...

@pendula95 I believe this is wrong: https://github.com/vert-x3/vertx-auth/blob/04ac36df802b8c09d4a15400fb5885bc092ad7ab/vertx-auth-oauth2/src/main/java/io/vertx/ext/auth/oauth2/impl/OAuth2AuthProviderImpl.java#L304-L316 Let me explain, when working in `On-Behalf-Of` mode the method will attempt to trade an existing token by a new one. However, I...