JWT RBAC claims and behavior

[sst...@redhat.com]

I have created a pull request (https://github.com/eclipse/microprofile-jwt-auth/pull/3) to update the current spec with some of the discussions as well as start some code prototyping to see how the implementation integrates with container APIs.

Let's continue the discussion in this thread.

[John D. Ament]

Scott,

I added some comments to the PR.  I'm not sure if you're purposely mixing impl and tck together, so we may need to be careful.

In addition, do you have an ECA on file? Are you signing your commits?  Please make sure you review the Eclipse contrib process, we're following the "via GitHub" flavor.

[sst...@redhat.com]

Ok, I have redone the pull request  (https://github.com/eclipse/microprofile-jwt-auth/pull/4) with the following changes:

1. Introduce a proper api abstraction for the JWTCallerPrincipal

2. Added an ri module for a reference implementation that depends on the Keycloak core API jar.

3. Updated the spec to reflect the most recent discussions.

I would like to have a kickoff meet up to discuss the following:

1. General discussion of current state of the specification.

2. Answer questions on the specification or the proposed API/RI.

3. Get into specifics regarding:

  a. The need for a unique_username vs requiring uniqueness on the preferred_username.

  b. Is there agreement on the proposed resource_access encoding of service specific groups/roles?

4. Next steps:

  a. TCK

  b. DefaultServerModule for Java EE 7.

  c. Additional test coverage.

I would like to try to do this Friday, July 21 around 14:00 UTC and will try to add the meeting information to the Microprofile calendar.

[sst...@redhat.com]

I'm not able to add an event to the MP calendar, so can someone add an "MP JWT Auth" event for this coming Friday at 14:00 UTC/GMT using the following bluejeans URL:

https://bluejeans.com/2363391609

I created a meeting notes doc with the current proposed agenda here:

https://docs.google.com/document/d/13nIVDJ6uxen7d57rxyARX8-vqsf3HTvC6hHnhitGZ0w/edit?usp=sharing

[Emily Jiang]

Scott, 

What is the repeating frequency? Weekly?

Emily

[sst...@redhat.com]

For now, yes weekly will work.

[Emily Jiang]

Done. Please import the calendar from MP wiki and verify whether it is correct or not.

Emily

[sst...@redhat.com]

It looks correct, and we are meeting now.