asgardeo / asgardeo/asgardeo-java-oidc-sdk
Add support for ID token encryption.
- Dominant language
- Java
- Stars
- 18
- Forks
- 28
- PR merge metrics
- No merged PRs in 30d
Description
**Description:**
Currently there is no support for ID token encryption with the java-oidc-sdk. As per the OIDC spec [1], it is optional to encrypt the ID token. But, encrypting the ID token using JWS[2] would provide "confidentiality".
[1] - https://openid.net/specs/openid-connect-messages-1_0-10.html#id_token
[2] - https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-41
Contributor guide
No contributing guide indexed for this repository
Research direction
Read the linked OpenID Connect ID Token section and the referenced JWS draft first. Then inspect the SDK's token creation and serialization entry points to determine where encryption support would belong; the issue does not name files, tests, an API, or expected behavior, so completion requires agreeing on those details.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100