apache / apache/activemq

Add OAuth2 support

Open
#1,737 1 comment 0 reactions 1 assignee Claimed by @jbonofre View on GitHub
Stale
Dominant language
Java
Stars
2.5k
Forks
1.5k
Avg merge
10h 46m
Merged PRs (30d)
79

Description

The purpose here is to add a new JAAS LoginModule allowing authentication based on JWT.

We can use Nimbus JWT dependency to deal with that.

The idea is:
1. Introduce a new `OAuth2LoginModule` to be used by the `JaasAuthenticationPlugin`, similar to the existing `PropertiesLoginModule` or `LDAPLoginModule`.
2. Validates tokens locally, to avoid systematic call to the IdP on every connection.
3. The OAuth2 configuration (issuer, claim, etc) is defined in the `conf/login.config` as other `LoginModules`.
4. The user pass the token as "password"

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.