Page Comparison

...

Attendees:

Brent

Daniel

Henri

• Jira Legacy
  server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JCOMOIDC-41

  • The same complete JWT security tests are now used for testing request objects too - one more bug was found regarding the exclusion of decryption algorithms

  • The logic should be stable and well tested now

• Jira Legacy
  server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-142

  • OP now exploits the new OIDC.SSO profile options: useRequestObject, signRequestObject and encryptRequestObject

  • TODO: document the combinations

• Jira Legacy
  server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-147

  • Managed to get the script working against my test instance, see: /wiki/spaces/DEV/pages/3187376129

  • Ideally this should be integrated to the integration tests

• For the next release:

  • Jira Legacy
    server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-144

  • Jira Legacy
    server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-149

  • Jira Legacy
    server System JIRA serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-150

Ian

• As expected, JEP 444 (virtual threads) is now proposed for Java 21. Main change from previous previews is that all threads may now use thread-local variables; there were previously some exceptions to this.

...