rootvector2 commented on PR #3652: URL: https://github.com/apache/cxf/pull/3652#issuecomment-6539634535
Added `testRefreshedJwtAccessTokenKeepsCertificateBinding` to `JCacheJWTOAuthDataProviderTest`, whose provider already has `setUseJwtFormatForAccessTokens(true)`. It checks the `cnf`/`x5t#S256` claim on the refreshed JWT. Moving `setCertificateThumbprintConfirmation` after `convertToJWTAccessToken` fails it while the extra-properties test still passes, so the ordering is covered now. Also added `testRefreshWithoutCertificateIssuesUnboundAccessToken` for the optional case: with no thumbprint in the message context at refresh, the new token is unbound (no `cnf` claim for JWT), same as the initial grant. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
