32 lines (19 loc) · 672 Bytes

atbash-jwt-sec

Atbash implementation of MicroProfile JWT Auth Spec

Prerequisites

Java 7
Java EE 7 (CDI 1.1, JASPIC 1.1, JAX-RS 2.0, EJB 3.x)

Goal

Support MicroProfile JWT Auth token within Java EE 7 Rest style applications.

Status

Partial implementation of the MicroProfile JWT Auth Spec.

Tested on WildFly 10.1

Done

Use MicroProfile JWT Auth token for populating Principal info of Java EE System
Detection of @LoginConfig
Use of @RolesAllowed

TODO

Injection of JWT claims

Issues

Status 500 when user has not the correct role (instead of status 4xx)
Authentication for non JAX-RS URLs (in combination with the JWT Auth)