MP-JWT 2.0 Roadmap

[Scott Stark]

I have created the following roadmap document:

https://docs.google.com/document/d/10ub1EPrtQgeS0_EL08Nif45rlLkostAyLOFF-BIrOao/edit#

We will be going over this in tomorrows MP-JWT discussion.

https://bluejeans.com/2363391609

https://docs.google.com/document/d/13nIVDJ6uxen7d57rxyARX8-vqsf3HTvC6hHnhitGZ0w/edit#

[Scott Stark]

Changed the roadmap doc to: https://docs.google.com/document/d/1pffgBufpY-JsbOQvnVRbFJvluJctAk8GTVnEBgpKrxw/edit#heading=h.mc1mgio4g4ti

as the RH google account is too anal about sharing.

[Arjan Tijms]

Hi,

>This issue would deprecate the existing @LoginConfig annotation in favor of an AuthenticationMechanism like approach that is consistent with the Java EE security.

>TODO: add a link to the work I believe Arjan had done to demonstrate this?

The full work can be seen here: https://github.com/payara/Payara/tree/master/appserver/payara-appserver-modules/microprofile/jwt-auth/src/main/java/fish/payara/microprofile/jwtauth

It's essentially an MP-JWT implementation fully build using standard APIs, without the need for any server/impl APIs (with the one exception the code to register a JAX-RS filter from a jar that isn't automatically scanned for annotations).

Essentially it scans for the LoginConfig annotation:

https://github.com/payara/Payara/blob/master/appserver/payara-appserver-modules/microprofile/jwt-auth/src/main/java/fish/payara/microprofile/jwtauth/cdi/CdiExtension.java#L104

If it finds that, it installs an EE Security identity store and authentication mechanism:

https://github.com/payara/Payara/blob/master/appserver/payara-appserver-modules/microprofile/jwt-auth/src/main/java/fish/payara/microprofile/jwtauth/cdi/CdiInitEventHandler.java#L94

The store and mechanism, and the credential type being used between them can be seen here:

https://github.com/payara/Payara/tree/master/appserver/payara-appserver-modules/microprofile/jwt-auth/src/main/java/fish/payara/microprofile/jwtauth/eesecurity

Hope this helps!

Kind regards,

Arjan

[Scott Stark]

Yes, and thanks Arjan.

--
You received this message because you are subscribed to a topic in the Google Groups "Eclipse MicroProfile" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/microprofile/FUX8Wd6PYfA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to microprofile...@googlegroups.com.
To post to this group, send email to microp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/microprofile/3d6ba4c7-d48d-471b-b1db-6116d36d0ad3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.