-
Notifications
You must be signed in to change notification settings - Fork 582
Open
Labels
2.xIssues for 2.x version branchIssues for 2.x version branchP4enhancementNew feature or requestNew feature or requestsecurity
Description
helidon/security/jwt/src/main/java/io/helidon/security/jwt/Jwt.java
Lines 273 to 275 in 84123e8
this.userPrincipal = JwtUtil.getString(payloadJson, "upn") | |
.or(() -> preferredUsername) | |
.or(() -> subject); |
These lines enforce that a JWT contains the claim upd
. Unfortunately it is impossible to suppress this behavior. When you look at https://docs.oracle.com/en/cloud/paas/identity-cloud/rest-api/ClientAssertion.html, you see JWTs that Oracle IDCS/IAM Domains would expect. With the lines above the request will always fail as extra/unexpected claims lead to rejection
Metadata
Metadata
Assignees
Labels
2.xIssues for 2.x version branchIssues for 2.x version branchP4enhancementNew feature or requestNew feature or requestsecurity
Type
Projects
Status
Low priority