jakartaee / jakartaee/security

Add authentication mechanism for JWT

Open
#255 14 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
66
Forks
43
PR merge metrics
No merged PRs in 30d

Description

Combine the effort of Microprofile JWT, and provides a standard JWT authentication mechanism for Http, WebSocket.

Mainly used in a `ResoruceServer` oauth2 role, provides one of the following config to decode JWT.
* issuerUri
* jwksUri
* publicKey location or value

Contributor guide

Open the contributing guide

Research direction

No file, test, or entry point is named. Begin by reviewing the MicroProfile JWT effort and the existing Jakarta Security handling for HTTP and WebSocket requests; define the supported issuerUri, jwksUri, and public-key configurations, with completion requiring a standard JWT authentication mechanism for the stated ResourceServer OAuth2 role.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, authorization, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.