Re: [es-dev] Review required for OpenIdConnect support!

[David Blevins <dblevins@xxxxxxxxxxxxx>]

> On Nov 14, 2021, at 11:13 PM, Rudy De Busscher <rdebusscher@xxxxxxxxx> wrote:
> 
> When there is no @OpenIdAuthenticationDefinition defined on a CDI bean, the functionality is not active. 

Sounds perfect.

> When MicroProfile JWT support is implemented through the Security API within the runtime, it is not possible to have an application where OpenId and JWT are active at the same time (still a restriction of the spec that you can't have 2 mechanisms active at the same time.)

That's reasonable.  I can't imagine someone needing to use them both at the same time in the same application.  As long as people have a portable way to chose, that's good enough for now IMO.  Possibly some people might want to use either JWT interface, but that's something we can do if the demand arrises.

Thanks again for the great work, Rudy!


-David