-
Enhancement
-
Resolution: Done
-
Major
-
None
-
None
-
None
The Narayana implementation of the MicroProfile LRA specification uses a JAX-RS filter to communicate with a remote coordinator. The interaction is currently insecure.
This issue is created in order to, introduce a quickstart for securing LRA coordinator endpoints when deployed on Quarkus application server using JWT (json web token) authorization security mechanism.
The quickstart will show, how we can authorize LRA coordinator endpoints by just with some web.xml configuration or something similar, so that there are no code changes required in the LRA coordinator code base.
- is blocked by
-
JBTM-3309 Investigate using MicroProfile JSON Web Token to secure interaction with an LRA coordinator
- Closed