Allow JwkTokenStore to be created with multiple JWK Set URLs

[habuma]

As it stands, JwkTokenStore only supports a single JWK Set URL. In SCS, we have potential for multiple token issuers (various UAA identity zones), and therefore multiple JWK Set URLs.

JwkTokenStore should either support multiple JWK Set URLs or there should be a separate implementation (perhaps MultipleIssuerJwkTokenStore) that does support multiple issuers and JWK Set URLs.

[wojtekk]

Great job guys!

Can I use this feature based on a configuration in property file only?

If this is possible, I can't figure out how to that - could you provide any example?

[jgrandja]

@wojtekk Yes, the Spring boot property is security.oauth2.resource.jwk.key-set-uri. I noticed that it's not documented in the Spring Boot reference so I logged this issue.

[jgrandja]

@wojtekk Also, keep in mind that this property supports only one JwkSet uri. If you want to specify multiple uri's than you will need to log a new issue in the Spring Boot repo to add this capability.

[wojtekk]

@jgrandja thanks, I was thinking about multiple properties - I will do that (or maybe I will try to prepare PR)

[KishorBachhav]

I can see that support for multiple JWK Set URLs is added but how to specify multiple urls through properties file.
@wojtekk did you get chance to file a separate issue so that I can refer to the same rather than me filing duplicate.

[KishorBachhav]

Issue#1479 is filed to provide support to specify multiple urls through properties file