Re: [jakartaee-platform-dev] [es-dev] Moving MicroProfile JWT to Jakarta

[David Blevins <dblevins@xxxxxxxxxxxxx>]

We could also go work on MP JWT and include that in our implementations?

-- 

David Blevins

http://twitter.com/dblevins
http://www.tomitribe.com

On Nov 4, 2022, at 12:12 PM, arjan tijms <arjan.tijms@xxxxxxxxx> wrote:

Hi,

In Jakarta Security we had long ago planned to include a JWT authentication mechanism. Some prototypes from around 2016 are still testimony to that.

Meanwhile, MicroProfile has specified JWT, and a couple of implementations of it (such as Payara, OmniFaces and SmallRye) are internally based on Jakarta Security.

We have discussed moving or copying MP specs to EE before, but nothing concrete has been established. Therefore I wonder how to proceed here. 

Do we copy over the MP JWT spec to a section in Jakarta Security and somehow keep them in sync?

Or do we reference the MP JWT spec from the Jakarta Security spec with text like: a compliant implementation should provide an authentication mechanism that behaves exactly like MP JWT with the following differences…

Or something else?

Thoughts?

Kind regards,

Arjan Tijms

_______________________________________________
es-dev mailing list
es-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/es-dev