-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Security 2024-07-08, Security 2024-07-22, Security 2024-08-05, Security 2024-08-19
-
None
-
3
-
None
-
None
-
None
-
None
-
None
-
None
-
None
The AuthSessionTokenManager provides the backbone of JWK management in this project. Build the AuthSessionTokenManager, and create the JWKDocument that will represent a JWK stored on disk in the jwks collection.
The router and shard specific implementations will be done in future tickets.
Design links: AuthSessionTokenManager and JWKDocument.
Acceptance Criteria: There is a virtual base class with the ability to generate JWKs and to sign and validate tokens. There is a mock class implementation of this function to facilitate future testing. There is a new IDL struct, JWKDocument.
- depends on
-
SERVER-91641 Extend JWSValidator to sign JWTs
-
- Needs Scheduling
-
- is depended on by
-
SERVER-91651 Implement JWT Expiration
-
- Open
-
-
SERVER-91645 Build the shard implementation of AuthSessionTokenManager
-
- Needs Scheduling
-
-
SERVER-91665 Extend AuthorizationSession to authenticate Clients with access tokens
-
- Needs Scheduling
-