feat: JWT token will always be used for user info, expiry and verification

[DeepDiver1975]

Description

Whenever the given token is a JWT we try to use it for:

• user information
• expiry
• verification

Motivation and Context

In some scenarios non JWT and JWT tokens can be used in parallel. We support this now.

Types of changes

• [ ] Bug fix (non-breaking change which fixes an issue)
• [x] New feature (non-breaking change which adds functionality)
• [ ] Breaking change (fix or feature that would cause existing functionality to change)
• [ ] Technical debt
• [ ] Tests

Checklist:

• [ ] Code changes
• [ ] Unit tests added
• [ ] Acceptance tests added
• [ ] Documentation ticket raised:

Open tasks:

• [ ] ...

[DeepDiver1975]

@mmattel once this is merged the config setting 'use-token-introspection-endpoint' is to be removed from the docs

[mmattel]

Will that PR finish "soon"? because we are doing QA on many new app releases including openidconect 😄

[DeepDiver1975]

Will that PR finish "soon"? because we are doing QA on many new app releases including openidconect smile

This is not to be added to the next release.

[DeepDiver1975]

refs https://github.com/owncloud/openidconnect/issues/241#issuecomment-1183139733

[mmattel]

Thanks for clarification 👍

[DeepDiver1975]

@mmattel once this is merged the config setting 'use-token-introspection-endpoint' is to be removed from the docs

also use-access-token-payload-for-user-info will go @mmattel

[sonarcloud[bot]]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
3 Code Smells

0.0% Coverage
0.0% Duplication

[jnweiger]

This is not to be added to the next release

Why not? openidconnect-2.2.0 is ready for QA. But you can still add this PR.

[mmattel]

Regarding the config.sample changes, these need to go into core and then transported to docs. I will file an issue in docs and a core pr.

[DeepDiver1975]

Why not? openidconnect-2.2.0 is ready for QA. But you can still add this PR.

Well - 15 days ago the status of this all was different and I wanted to make sure that nothing breaks ....