An open API service indexing awesome lists of open source software.

https://github.com/atbashee/atbash-jwt-sec

Atbash implementation of MicroProfile JWT Auth Spec
https://github.com/atbashee/atbash-jwt-sec

Last synced: 11 months ago
JSON representation

Atbash implementation of MicroProfile JWT Auth Spec

Awesome Lists containing this project

README

          

# atbash-jwt-sec
Atbash implementation of MicroProfile JWT Auth Spec

## Prerequisites

* Java 7
* Java EE 7 (CDI 1.1, JASPIC 1.1, JAX-RS 2.0, EJB 3.x)

## Goal

Support MicroProfile JWT Auth token within Java EE 7 Rest style applications.

## Status

Partial implementation of the MicroProfile JWT Auth Spec.

Tested on WildFly 10.1

### Done

* Use MicroProfile JWT Auth token for populating Principal info of Java EE System
* Detection of @LoginConfig
* Use of @RolesAllowed

### TODO

* Injection of JWT claims

### Issues

* Status 500 when user has not the correct role (instead of status 4xx)
* Authentication for non JAX-RS URLs (in combination with the JWT Auth)