Teddy J. Torres

icon indicating a website link https://www.teddyjtorres.com icon indicating an email [email protected]

icon location Software Architect, formerly at IBM. Experienced in App Server Security, Single Sign-On (SSO), OAuth 2.0, OpenID Connect, and MP JWT.

Results 10 comments of Teddy J. Torres

TCK Challenge: ldap-3 uses seeAlso (memberOf) in LDIF without defining those groups

Hi @arjantijms, Please let us know if this challenge has been accepted or if more information is needed. Regards, Teddy

TCK Challenge: openid default test needs to use signed JWT token

Hi @arjantijms, Please let us know if this challenge can be accepted and if #278 would be a viable solution. Regards, Teddy

TCK Challenge: openid default test needs to use signed JWT token

Reopened since the solution is incomplete.

TCK Challenge: openid default test needs to use signed JWT token

PR #285 addresses updating the provider to use https endpoints and how to configure for server trust.

TCK Challenge: openid default test needs to use signed JWT token

@arjantijms Thank you for approving #285. Please let us know if 3.0.1-TCK could be staged for release. Thanks!

[TCK Challenge] Ignore ee.jakarta.tck.security.test.AppMemBasicDecorateIT.testNotAuthenticatedAndDecorated()

Hi @arjantijms, Please let us know if this challenge has been accepted or if more information is needed. Regards, Teddy

TCK Challenge: ldap test has non-compliant mismatch between LDAPIdentityStoreDefinition and LDIF

Hi @arjantijms, Please let us know if this challenge has been accepted or if more information is needed. Regards, Teddy

Add authentication mechanism for OpenID Connect

Greetings, This is a request for clarifications and perhaps get an update on this spec draft. Since the section https://github.com/jakartaee/security/blob/master/spec/src/main/asciidoc/openid.adoc#openidauthenticationmechanism refers to the HttpAuthenticationMechanism implementation, the following responses should be...

Add authentication mechanism for OpenID Connect

Greetings, I am reviewing the draft for implementation and the following section is problematic, > Step (3) in the OpenID Connect diagram depicted above, that is, when the OpenID Connect...

Add authentication mechanism for OpenID Connect

Hi, Yes. Also since notifying the container with something other than CredentialValidation.VALID results in AuthenticationStatus.FAILURE per https://github.com/jakartaee/security/blob/7572f4e002b0fbc308706593c67bfa9e61f12e5d/api/src/main/java/jakarta/security/enterprise/authentication/mechanism/http/HttpMessageContext.java#:~:text=AuthenticationStatus-,notifyContainerAboutLogin,-(CredentialValidationResult%20result)%3B, and the section is about authentication mechanism's return values, the wording is simplified...