jakartaee / jakartaee/security
Add authentication mechanism for JWT
Open
- Dominant language
- Java
- Stars
- 66
- Forks
- 43
- PR merge metrics
- No merged PRs in 30d
Description
Combine the effort of Microprofile JWT, and provides a standard JWT authentication mechanism for Http, WebSocket.
Mainly used in a `ResoruceServer` oauth2 role, provides one of the following config to decode JWT.
* issuerUri
* jwksUri
* publicKey location or value
Contributor guide
Research direction
No file, test, or entry point is named. Begin by reviewing the MicroProfile JWT effort and the existing Jakarta Security handling for HTTP and WebSocket requests; define the supported issuerUri, jwksUri, and public-key configurations, with completion requiring a standard JWT authentication mechanism for the stated ResourceServer OAuth2 role.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- authentication, authorization, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100