Paulo Lopes

Results 94 issues of Paulo Lopes

Followup: https://github.com/vert-x3/vertx-auth/issues/519 The current API uses a raw json object which is error prone and typpos. We should have a type safe alternative that extends internally a `JsonObject` but defines...

enhancement

On the client side (js) the API should leverage: https://developer.mozilla.org/en-US/docs/Web/API/AbortController As a wait to interrupt the fetch operations, on user agents that support it.

enhancement

Signed-off-by: Paulo Lopes Motivation: Explain here the context, and why you're making that change, what is the problem you're trying to solve. Conformance: Your commits should be signed and you...

We see a common request for better security and privilege escalation in applications. Oauth2 providers have developed a few extra flows to address this kind of security requirements. One example...

enhancement

See https://datatracker.ietf.org/doc/html/rfc8693 This is a new official flow for Oauth2 for token exchange (user impersonation/delegation). The flow is quite similar to other on-behalf-of flows, it should be simple to add...

enhancement

If a token contains a `x5t` x509 certificate thumbprint, we could spare some cycles by going directly to that certificate instead of verifying the token against all certificates. reference: https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-33#section-4.1.7

enhancement

Currently we ship automatic config for several providers, however this is a very short list: https://github.com/vert-x3/vertx-auth/blob/master/vertx-auth-oauth2/src/main/java/io/vertx/ext/auth/oauth2/providers/ This task, is about adding config for other providers, for example: * apple *...

enhancement
Hacktoberfest

Just like with other providers, add the defaults for this Open Source Indentity Server.

enhancement

During the last F2F meeting it was discussed some improvements on storage based providers. The main idea is to create a new "abstract" provided that has no storage and have...

enhancement

We would like to have a way to collect metrics for the end user. For reference: https://github.com/grpc-ecosystem/grpc-opentracing/tree/master/java/src/main/java/io/opentracing/contrib

enhancement