feat (TUI): JWT Response for OAuth Token Introspection

[nynymike]

This was implemented in #3658, but I'm not sure it was exposed in the TUI. For example, it could be in the Encryption/Signing section, or it could also be in the Tokens section.

I dont' see any way to configure the signing and encryption for the introspection endpoint.

For example here is a screenshot of Forgerock:

[yuriyz]

It is already done. See #3658 (comment)
Closing as implemented.

[nynymike]

I changed this to track a feature request for the TUI.

[yuriyz]

@devrimyatar please hold on. Not sure how it got missed but AS picks up signing algorithm from defaultSignatureAlgorithm configuration property while spec clearly saying about client specific (not global):

• introspection_signed_response_alg
• introspection_encrypted_response_alg
• introspection_encrypted_response_enc

Also supported algs has to be introduced by discovery endpoint.

Re-opened - #3658

[pujavs]

@yuriyz, config-api does not expose /introspection or /register jans-auth endpoint.

• config-api client creation endpoint /api/v1/openid/clients uses https://github.com/JanssenProject/jans/blob/main/jans-auth-server/common/src/main/java/io/jans/as/common/model/registration/Client.java class.
• Schema object attributes for Client are autogenerated based on this Client class -> https://github.com/JanssenProject/jans/blob/main/jans-config-api/docs/jans-config-api-swagger.yaml#L8763

Please confirm which attributes from this schema definition or if any change required in config-api for this issue.

[yuriyz]

@pujavs it's about ClientAttributes, is it autogenerated as well ?
Config-api does not have all attributes defined in AS ClientAttributes
https://github.com/JanssenProject/jans/blob/main/jans-config-api/docs/jans-config-api-swagger.yaml#L9003C5-L9003C21

For example these are missed in swagger:

    @JsonProperty("introspectionSignedResponseAlg")
    private String introspectionSignedResponseAlg;

    @JsonProperty("introspectionEncryptedResponseAlg")
    private String introspectionEncryptedResponseAlg;

    @JsonProperty("introspectionEncryptedResponseEnc")
    private String introspectionEncryptedResponseEnc;

[pujavs]

Regenerated openapi spec to reflect new fields and pushed changes via PR 6566