Hi Carsten, I have replied with my comments on Jira.
Thank you, Jacopo On Sat, Nov 7, 2026 at 5:55 PM Carsten Schinzer <[email protected]> wrote: > > Hello Everyone, > > > With the above ticket I suggest two enhancements to the JWT handling in > framework/security: > > - we should enable 3rd party JWT issuers to be trusted and handled; IMO this > should be a config property that defaults to today’s OFBiz-olny issue when > being empty > - we should also start handling the RFC 7519 claims within a JWT, esp > „sub“(ject) instead of „userLoginId“ which is entirely custom OFBit JWT style > > Any opinions that I should include in my contribution? Any thoughts? > > Warm regards > > > Carsten > >
