-
Notifications
You must be signed in to change notification settings - Fork 602
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #17548 from c00crane/oidc_jwe_3
Oidc JWE FAT delivery #3 - propagation
- Loading branch information
Showing
27 changed files
with
1,151 additions
and
473 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes.
31 changes: 31 additions & 0 deletions
31
...curity.oauth.oidc_fat.common/publish/files/serversettings/userinfoEndpointApplication.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License v1.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-v10.html | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <server> | ||
|
|
||
| <application | ||
| type="war" | ||
| id="UserinfoEndpointServlet" | ||
| name="UserinfoEndpointServlet" | ||
| location="${server.config.dir}/test-apps/testUserinfoEndpoint.war" | ||
| > | ||
| <application-bnd> | ||
| <security-role name="Employee"> | ||
| <special-subject type="ALL_AUTHENTICATED_USERS" /> | ||
| </security-role> | ||
| <security-role name="Manager"> | ||
| <special-subject type="ALL_AUTHENTICATED_USERS" /> | ||
| </security-role> | ||
| <security-role name="AllAuthenticated"> | ||
| <special-subject type="ALL_AUTHENTICATED_USERS" /> | ||
| </security-role> | ||
| </application-bnd> | ||
| </application> | ||
| </server> |
7 changes: 7 additions & 0 deletions
7
...om.ibm.ws.security.oauth.oidc_fat.common/publish/test-features/oauth20TokenMapping-2.0.mf
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| Subsystem-ManifestVersion: 1 | ||
| IBM-ShortName: oauth20TokenMapping-2.0 | ||
| Subsystem-SymbolicName: com.ibm.ws.security.oauth20.token.mapping; visibility:=public | ||
| Subsystem-Version: 2.0.0 | ||
| Subsystem-Content: com.ibm.ws.security.oauth20.token.mapping.jakarta; version="[1,1.0.100)"; start-phase:=SERVICE | ||
| Subsystem-Type: osgi.subsystem.feature | ||
| IBM-Feature-Version: 2 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
48 changes: 48 additions & 0 deletions
48
...oidc_fat.common/test-applications/testUserinfoEndpoint/resources/META-INF/permissions.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,48 @@ | ||
| <?xml version="1.0" encoding="UTF-8"?> | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License v1.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-v10.html | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <permissions | ||
| xmlns="http://xmlns.jcp.org/xml/ns/javaee" | ||
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | ||
| xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee | ||
| http://xmlns.jcp.org/xml/ns/javaee/permissions_7.xsd" | ||
| version="7" | ||
| > | ||
|
|
||
| <permission> | ||
| <class-name>java.io.FilePermission</class-name> | ||
| <name>ALL FILES</name> | ||
| <actions>read</actions> | ||
| </permission> | ||
|
|
||
| <permission> | ||
| <class-name>javax.security.auth.AuthPermission</class-name> | ||
| <name>wssecurity.getRunAsSubject</name> | ||
| </permission> | ||
|
|
||
| <permission> | ||
| <class-name>java.util.PropertyPermission</class-name> | ||
| <name>*</name> | ||
| <actions>read</actions> | ||
| </permission> | ||
|
|
||
| <permission> | ||
| <class-name>javax.security.auth.AuthPermission</class-name> | ||
| <name>wssecurity.getCallerSubject</name> | ||
| </permission> | ||
|
|
||
| <permission> | ||
| <class-name>javax.security.auth.PrivateCredentialPermission</class-name> | ||
| <name>* * "*"</name> | ||
| <actions>read</actions> | ||
| </permission> | ||
|
|
||
| </permissions> |
48 changes: 48 additions & 0 deletions
48
...ty.oauth.oidc_fat.common/test-applications/testUserinfoEndpoint/resources/WEB-INF/web.xml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,48 @@ | ||
| <?xml version="1.0" encoding="UTF-8"?> | ||
| <!-- | ||
| Copyright (c) 2021 IBM Corporation and others. | ||
| All rights reserved. This program and the accompanying materials | ||
| are made available under the terms of the Eclipse Public License v1.0 | ||
| which accompanies this distribution, and is available at | ||
| http://www.eclipse.org/legal/epl-v10.html | ||
| Contributors: | ||
| IBM Corporation - initial API and implementation | ||
| --> | ||
| <web-app id="UserinfoEndpointServlet" version="3.0" | ||
| xmlns="http://java.sun.com/xml/ns/javaee" | ||
| xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" | ||
| xsi:schemaLocation="http://java.sun.com/xml/ns/javaee | ||
| http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd"> | ||
|
|
||
| <display-name>Test Userinfo Endpoint</display-name> | ||
| <description>RP/RS Server-side implementation to replace the OP userinfo endpoint.</description> | ||
|
|
||
| <!-- SERVLET DEFINITIONS --> | ||
| <servlet id="Servlet_1"> | ||
| <servlet-name>UserinfoEndpointServlet</servlet-name> | ||
| <servlet-class>com.ibm.ws.security.fat.testUserinfoEndpoint.UserinfoEndpointServlet</servlet-class> | ||
| <load-on-startup>1</load-on-startup> | ||
| </servlet> | ||
|
|
||
| <!-- SERVLET MAPPINGS --> | ||
| <servlet-mapping id="ServletMapping_1"> | ||
| <servlet-name>UserinfoEndpointServlet</servlet-name> | ||
| <url-pattern>/saveToken</url-pattern> | ||
| </servlet-mapping> | ||
| <servlet-mapping id="ServletMapping_2"> | ||
| <servlet-name>UserinfoEndpointServlet</servlet-name> | ||
| <url-pattern>/getJws</url-pattern> | ||
| </servlet-mapping> | ||
|
|
||
| <!-- SERVLET MAPPINGS --> | ||
| <servlet-mapping id="ServletMapping_3"> | ||
| <servlet-name>UserinfoEndpointServlet</servlet-name> | ||
| <url-pattern>/getJwe</url-pattern> | ||
| </servlet-mapping> | ||
|
|
||
| </web-app> | ||
|
|
||
|
|
||
|
|
||
|
|
Oops, something went wrong.