ADORSYS-GIS / ADORSYS-GIS/keycloak-oid4vp-plugin

Remove workaround for recovering users by username

未关闭
#166 2 条评论 0 个 reaction 已指派 1 人 已被 @forkimenjeckayang 认领 在 GitHub 查看
主要语言
Java
星标
35
派生
1
平均合并
2 天 9 小时
30 天内合并 PR
17

描述

Mapping the user ID into issued credentials is now stable. This workaround should be removed, and username no longer requested by default.

https://github.com/ADORSYS-GIS/keycloak-oid4vp-plugin/blob/222780864256d6dc9ee29045c822a9400d2141d4/src/main/java/io/github/adorsysgis/keycloak/protocol/oid4vc/oid4vp/authenticator/OID4VPAuthenticator.java#L271-L275

Consider also looking into enforcing the credential issuer for mDocs the same way it is done for SD-JWTs with respect to https://openid.net/specs/openid-4-verifiable-presentations-1_0.html#name-end-user-authentication-usi.

ETA: 2 days

贡献指南

这个仓库没有索引到贡献指南

调研方向

The workaround is in src/main/java/io/github/adorsysgis/keycloak/protocol/oid4vc/oid4vp/authenticator/OID4VPAuthenticator.java around lines 271-275; start by reading that path and inspecting linked PR #195. Done means username is no longer requested by default and the obsolete recovery workaround is removed; determine whether the mDoc credential-issuer enforcement is also in scope.

由索引模型根据 Issue 内容生成。

评估

技术栈
java
领域
authentication
Issue 类型
重构
难度
3/5
预计耗时
1-2 天
活跃度
停滞
描述清晰度
基本清楚
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。