users@javaee-security-spec.java.net

[javaee-security-spec users] Re: JSR 375 and JWT (JSON Web Tokens)

From: Alex Kosowski <alex.kosowski_at_oracle.com>
Date: Thu, 21 May 2015 22:24:59 -0400

Hi Danilo,

One use case for JWT would be for standardized identity propagation.
But, we are first trying to address more fundamental issues in EE
Security, so identity propagation will probably be post-1.0. Certainly,
if JWT addresses an issue, I am sure we will consider using it.

Thanks,
Alex

On 5/9/15 11:17 AM, dcominottim_at_gmail.com wrote:
> Hello everyone,
>
> I have been trying to follow up on the recent developments of JSR 375
> and haven't been able to find any mention of JWT (JSON Web Token). From
> my experience, use cases involving JWTs are increasingly common, and
> JWTs can be a joy to work with in the context of JAX-RS and REST APIs
> for web applications, from instance.
>
> Therefore, I would like to ask: are JWT use cases something that
> can/will be worked on in JSR 375?
>
> Thank you for your attention and feedback.
>
> Respectfully yours,
>
> Danilo Cominotti Marques