nscendoni opened a new pull request, #51:
URL: https://github.com/apache/sling-org-apache-sling-auth-oauth-client/pull/51
The OidcAuthenticationHandler built the IDTokenValidator with the
constructor that uses Nimbus' default DefaultResourceRetriever, whose HTTP
entity size limit is fixed at 50 KB. IdPs that publish a large JWK set cause
token validation to fail with:
Couldn't retrieve remote JWK set: Exceeded configured input limit of
51200 bytes
Add three OSGi config attributes (jwkSetHttpSizeLimit,
jwkSetHttpConnectTimeout, jwkSetHttpReadTimeout) and pass an explicitly
configured DefaultResourceRetriever to IDTokenValidator. Defaults match the
previous Nimbus defaults (51200 bytes, 500 ms, 500 ms) so behaviour is
unchanged unless overridden.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
