Skip to content

added MTLS external validation support - #21

Open
DmitryMishchuk wants to merge 3 commits into
tnorimat:mainfrom
DmitryMishchuk:feature/DM_add_mtls_external_validation_support
Open

added MTLS external validation support#21
DmitryMishchuk wants to merge 3 commits into
tnorimat:mainfrom
DmitryMishchuk:feature/DM_add_mtls_external_validation_support

Conversation

@DmitryMishchuk

Copy link
Copy Markdown

Added MTLS external validation support as per keycloak/keycloak-community#267

@DmitryMishchuk

Copy link
Copy Markdown
Author

@tnorimat please Review

@tnorimat

Copy link
Copy Markdown
Owner

@DmitryMishchuk Thank you. I will review this soon.

@tnorimat tnorimat left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@DmitryMishchuk I've reviewed this PR and add some review comments. Could you check them?

@@ -0,0 +1,13 @@
package org.keycloak.mtls;

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm not sure whether this provider is in server-spi project.

AFAIK, the providers in server-spi are fixed and never change their interfaces.
IMO, it might be appropriate that this provider be in server-spi-private.

It might be better to ask Keycloak development team about this point.

Comment thread server-spi/src/main/java/org/keycloak/mtls/MtlsExtendedValidationProvider.java Outdated
Comment thread services/src/main/java/org/keycloak/protocol/oidc/OIDCAdvancedConfigWrapper.java Outdated
tnorimat pushed a commit that referenced this pull request Jul 8, 2023
Closes keycloak/security#32

Co-authored-by: Stian Thorgersen <stianst@gmail.com>
Conflicts:
    services/src/main/java/org/keycloak/protocol/oidc/grants/device/DeviceGrantType.java
tnorimat pushed a commit that referenced this pull request Feb 11, 2024
test: add test for nested disclosable jwt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants