Skip to content

Conversation

vpavic
Copy link
Contributor

@vpavic vpavic commented Feb 28, 2025

Since audience is among claims that are often validated, this PR introduces JwtAudienceValidator to simplify such use case with spring-security-oauth2-jose. I've also plugged the new validator into recently introduced at+jwt support (thanks for that).

Signed-off-by: Vedran Pavic <vedran@vedranpavic.com>
@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Feb 28, 2025
@jzheaux jzheaux self-assigned this Feb 28, 2025
@jzheaux jzheaux added type: enhancement A general enhancement in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) and removed status: waiting-for-triage An issue we've not yet triaged labels Feb 28, 2025
@jzheaux jzheaux added this to the 6.5.0-M3 milestone Feb 28, 2025
@jzheaux jzheaux merged commit 401e237 into spring-projects:main Feb 28, 2025
6 checks passed
@jzheaux
Copy link
Contributor

jzheaux commented Feb 28, 2025

Nice to see you again, @vpavic! This is merged into main.

@jzheaux jzheaux changed the title Introduce JwtAudienceValidator Add JwtAudienceValidator Feb 28, 2025
@vpavic
Copy link
Contributor Author

vpavic commented Feb 28, 2025

Likewise! Thanks for the quick merge. 👍

@vpavic vpavic deleted the audience-validator branch February 28, 2025 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
in: oauth2 An issue in OAuth2 modules (oauth2-core, oauth2-client, oauth2-resource-server, oauth2-jose) type: enhancement A general enhancement
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants