Harrison Sheinblatt created KNOX-3433:
-----------------------------------------
Summary: knoxidf token exchange response must include
issued_token_type
Key: KNOX-3433
URL: https://issues.apache.org/jira/browse/KNOX-3433
Project: Apache Knox
Issue Type: Task
Components: JWT
Reporter: Harrison Sheinblatt
RFC 8693 §2.2.1 requires the response include issued_token_type
It's not set now by knoxidf.
The correct value to set is "urn:ietf:params:oauth:token-type:jwt". While
access_token may be OK in some circumstances, since we're returning a jwt that
is meant to be used as a jwt for possible future exchanges and authz, so the
client might parse it to get, for example, group claims, jwt is correct here.
Note that OAuthResource does set the field in the response, but hardcodes it to
access_token and has different logic than the base knoxtoken TokenResource, so
it's unclear we want to inherit from that and refactor it to allow the jwt
value.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
