users@javaee-security-spec.java.net

[javaee-security-spec users] JWT and IdentityStore.getGroupsByCallerPrincipal(CallerPrincipal)

From: Scott Stark <starksm64_at_gmail.com>
Date: Tue, 2 May 2017 09:57:03 -0700

I have been reviewing the https://github.com/rdebusscher/soteria-jwt code
as as well as the JSR 375 spec as part of the work I'm doing on the
MicroProfile JWT RBAC proposal (
https://github.com/eclipse/microprofile-evolution-process/pull/18#pullrequestreview-29087353)
,and I only see the JWT token being used for authentication.

Is there a plan to expand this to discuss how to support the
IdentityStore.getGroupsByCallerPrincipal(CallerPrincipal) method as well?
This is one of the main extensions to the typical usage of tokens that we
would like to standardize in MicroProfile for inter-op purposes.

Scott Stark