amichair opened a new pull request, #2744:
URL: https://github.com/apache/james-project/pull/2744

   - documentation on how to set up JWT for webadmin access
   - added token expiration tests (it works, but was not documented/tested)
   - added kid lookup support to the DefaultPublicKeyProvider (using JWK 
thumbprint), changed the PublicKeyProvider interface to have a separate 
get(kid) method, changed JwksPublicKeyProvider to have separate implementations 
for the get all and get kid methods (instead of the instance having a kid 
associated with it and either using it or not in the get all method), and 
updated JwtTokenVerifier (shared by both) to try the kid lookup if kid header 
exists or iterate through all keys if the header does not exist. This makes the 
design more intuitive, consistent and shared among all providers.
   - upgrade jwks-rsa
   - upgrade jjwt, including migration to the new api - both small 
naming/constant changes, and a bigger change in handling compression with our 
configurable flag
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@james.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@james.apache.org
For additional commands, e-mail: notifications-h...@james.apache.org

Reply via email to