smallrye-jwt
smallrye-jwt copied to clipboard
smallrye
**Describe the bug** smallrye-jwt seems to fetch keys from the OAuth provider's key endpoint only on first request, however if this original fetch fails, the library never retries, and all...
Hello there, ### Problem I need to set / mock the actual evaluation time for creating and verifying a JWT. ### Why we use quarkus / smallrye JWT in our...
Resolves #165 This adds the initial structure for handling proof of possession semantics at the application layer. This PR does not contain any tests, as I would like some initial...
This doesn't build properly in the CI because the SmallRye Converters project is still in SNAPSHOT.
Now that custom token schemes are supported, this issue is to discuss adding a DPoP verifier to the smallrye-jwt code. We could also discuss implementing this as a quarkus extension,...
https://github.com/smallrye/smallrye-jwt/blob/main/implementation/jwt-auth/src/main/java/io/smallrye/jwt/config/JWTAuthContextInfoProvider.java#L224 ```java @Inject @ConfigProperty(name = "mp.jwt.verify.publickey.algorithm") private Optional mpJwtPublicKeyAlgorithm; ``` This should be `Optional mpJwtPublicKeyAlgorithms`, so that JWT tokens can smoothly switch to another algorithm.
Currently, the loading of resources is limited to `file`, `https`, and `classpath` URLs [1]. It would be useful to also support `data` URLs [2] as well. In a cloud environment,...
Some providers can generate PEM keys in PKCS1 format with ``` -----BEGIN RSA PRIVATE KEY----- -----END RSA PRIVATE KEY----- ``` and `smallrye-jwt` can't read them. The regex needs to be...
[RFC 7662](https://tools.ietf.org/html/rfc7662) talks about OAuth2/OIDC servers returning token introspection responses. Keycloak also implements it: https://issues.jboss.org/browse/KEYCLOAK-2266 Having such a factory will let the users (optionally) integrate with any certified OIDC servers....
We should have a new module which will offer `Uni` responses for `JWTParser` and `JWTCallerPrincipalFactory` which will help Quarkus users write better reactive applications involving smallrye-jwt