Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [es-dev] Review required for OpenIdConnect support!

There is this issue (1) for supporting multiple authentication mechanisms simultaneously.

(1) https://github.com/eclipse-ee4j/security-api/issues/188

On Tue, 16 Nov 2021 at 13:46, Werner Keil <werner.keil@xxxxxxxxx> wrote:
Hi Rudy/all,

Do you expect that to change in future versions of he spec?

Werner



On Mon, Nov 15, 2021 at 8:13 AM Rudy De Busscher <rdebusscher@xxxxxxxxx> wrote:
Hi David,

When there is no @OpenIdAuthenticationDefinition defined on a CDI bean, the functionality is not active. 

When MicroProfile JWT support is implemented through the Security API within the runtime, it is not possible to have an application where OpenId and JWT are active at the same time (still a restriction of the spec that you can't have 2 mechanisms active at the same time.)

On Fri, 12 Nov 2021 at 20:24, David Blevins <dblevins@xxxxxxxxxxxxx> wrote:
Hey Rudy,

I had a quick look through the PR and at first glance it looks pretty impressive!  From an implementation perspective, how does one handle having both this and MicroProfile JWT in the same server?  I know MP JWT is off by default, so that should keep it from conflicting with this OpenIdConnect support.  Is this also off by default and/or can it be shut off?

Thanks for the excellent work!


-- 
David Blevins

On Nov 12, 2021, at 6:11 AM, Rudy De Busscher <rdebusscher@xxxxxxxxx> wrote:

All,

The OpenidConnect integration has been ready for review for a few weeks, but I did not get any feedback.  We should merge this ASAP so that it is included in Jakarta EE 10.


Thanks
Rudy
_______________________________________________
es-dev mailing list
es-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/es-dev

_______________________________________________
es-dev mailing list
es-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/es-dev
_______________________________________________
es-dev mailing list
es-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/es-dev
_______________________________________________
es-dev mailing list
es-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/es-dev

Back to the top