Resource Server PR plan - Githubissues

jzheaux / spring-security

Spring Security

http://spring.io/spring-security

Apache License 2.0

4 stars 3 forks source link

Resource Server PR plan #18

Open jgrandja opened 6 years ago

jgrandja commented 6 years ago

This is the proposed plan for the Resource Server PR's.

MVP

PR-1

Support JWT access tokens
Key configuration via JWK Set Url

PR-2

OAuth2TokenAuthoritiesExtractor (related #7) - extension point that enables extracting authority information from the token

PR-3

Support JWK Set Url configuration via Issuer configuration
JWK Set Url is obtained using OpenID Connect Discovery and the configured Issuer

PR-4

Support local configuration of java.security.PublicKey
Support configuration of 1 RSA PK (for initial support)

PR-5

Capability to validate OAuth 2.0 Tokens OAuth2TokenValidator

NICE TO HAVE

PR-6

Support key configuration using 1+ Issuers
uses OpenID Connect Discovery to obtain the JWK Set Url

PR-7

Support opaque access tokens
Implementation of OAuth 2.0 Token Introspection