-
Enhancement
-
Resolution: Unresolved
-
Major
-
None
-
7.0.0.Final
The LRA specification [1] implicitly requires that the Narayana LRA coordinator can be configured to invoke LRA participant callbacks in a secure way.
This task is to provide an example of how to do that using OIDC. Quarkus for example has good support for OIDC [2] and that could be used to get it working for Quarkus and to see what code changes, if any, would be needed. The Quarkus LRA blog [3] contains an example of how to build coordinators so that could be used as a starting point for this task.
[1] https://github.com/eclipse/microprofile-lra/blob/main/spec/src/main/asciidoc/microprofile-lra-spec.asciidoc#quick-overview-of-annotations
[2] https://quarkus.io/guides/security-oidc-code-flow-authentication
- is related to
-
JBTM-3798 A comprehensive LRA security quickstart
- Open