jakartaee / jakartaee/security

Create a TCK test for multiple OIDC mechanisms

Open
#348 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
66
Forks
43
PR merge metrics
No merged PRs in 30d

Description

Create a test that covers the situation described in detail in https://github.com/jakartaee/security/issues/342:

* a custom `HttpAuthenticationMechanismHandler` annotated with `@Alternative @Priority` to enable it
* 2 OIDC mechanism definitions - multiple combinations: one with the default qualifier, the other one with a custom qualifier; both with custom qualifiers; both defined on a single class; defined in 2 separate classes
* Inject both OIDC mechanisms into the custom handler via qualifiers

Optionally also create similar tests for other mechanisms, like Basic and Form. Or a test that combines many mechanisms, e.g. 2 Basic, 3 Form, 2 OIDC.

Contributor guide

Open the contributing guide

Research direction

Read the detailed scenario in issue 342 first, then inspect the Jakarta Security TCK's existing authentication-mechanism tests and entry points. Cover the listed OIDC combinations, including qualifier injection into a prioritized alternative handler, and verify the tests pass. Treat the optional Basic and Form cases as follow-up scope.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, security, testing-qa
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.