Skip to content

#195 Use DefaultJWTTokenParser per issuer

Kevin Schmengler requested to merge 195_fixMultipleIssuerConfig into develop

Related issues

#195 (closed)

Acceptance criteria

  • Implemented code changes don't diverge from the related issue.
  • Documentation reflects the status quo after merge.
  • Version number is incremented according to SemVer. (Snapshot versions are not merged/released.)
  • Only released versions of dependencies are used (i.e. no snapshot versions).
  • The changelog contains entries reflecting all changes of this MR (and their reasons).

The bug is related to the use of DefaultJWTTokenParser. Since the keys are being cached, we can't use a single instance of DefaultJWTTokenParser for tokens issued by different IDPs.

Co-authored-by: Kevin Schmengler schmengler@riege.com

Merge request reports