Comments (2)
@mihai-vladuc I am assuming that the change can help the developers skip the token validation in the early stage of the application development. If that is the case, should we backport the skipPathPrefixes to 1.6.x branch? It is more visible and easily to be removed when deploying to higher environments. What do you think?
from light-4j.
@stevehu This issue was opened with a specific business case in mind: to skip token “signature” and “expiration”. But we need others token functionalities, such as the “claims”. We don’t want to totally skip the token functionality.
We’ll keep in mind “skipPathPrefixes” configuration parameter and we’ll be opening another issue for that if we'll need it. Thank You !
from light-4j.
Related Issues (20)
- Move JwtVerifier and SwtVerifier to security-config
- Update tlsVersion to TLSv1.3 by default in client.yml from client-config
- implement an admin endpoint to explore the cache manager
- light-4j 1.6.x : Updating dependencies in light-4j with CVEs to: jose4j 0.9.6 HOT 2
- SidecarPathPrefixServiceHandler never calls put attachment
- return 413 response code if request body is too big
- upgrade json-schema-validator to 1.4.3 HOT 1
- remove dependency of json-schema-validator
- add open-telemetry for tracing, metrics and logging
- Add another JwtVerifier implementation that does not verify scopes
- upgrade http-client to 1.0.12
- move MapUtil to light-4j utility module
- Fix a typo in OpenApiHandler HOT 1
- rollback the jwt issuer and verifier with local jks files
- update dependences for some modules that depending on http-client
- change the jwk cache object to single JsonWebKey
- The parameter name is missing after upgrade json-schema-validator
- -Dlight-4j-config-password is not working for AutoAESSaltDecryptor
- Add a method to check if the jwt token has scopes in JwtVerifier
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from light-4j.