microcks / microcks/microcks

Make token issuer validation optional

Open
#1,095 9 comments 0 reactions 0 assignees View on GitHub
component/install keep-open kind/enhancement kind/question
Dominant language
Java
Stars
2k
Forks
370
Avg merge
1d 22h
Merged PRs (30d)
19

Description

### Reason/Context

In some cases, Microcks' clients may receive an auth token from sources other than the Microcks' realm. Now in this case we get `Bearer error="invalid_token", error_description="An error occurred while attempting to decode the Jwt: The iss claim is not valid"`. And there is no way to fix this without total keycloak disabling. We can't just override this `spring.security.oauth2.resourceserver.jwt.issuer-uri=` in kube config, because '' is not the same as null for Spring when it creates the validator.

### Description

All we need to fix this is to make `spring.security.oauth2.resourceserver.jwt.issuer-uri` optional. There will be no breaking changes.

### Implementation ideas

Idea

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the implementation idea in PR #1096 and the Spring Security resource-server configuration for spring.security.oauth2.resourceserver.jwt.issuer-uri. Done means issuer validation can be omitted when the property is absent while existing behavior with a configured issuer remains unchanged.

Written by the indexing model from the issue text.

Assessment

Tech stack
java, kubernetes, spring-boot
Domain
authentication, backend, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.