Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add automatic support for DPoP #1150

Merged
merged 2 commits into from
May 7, 2024
Merged

Add automatic support for DPoP #1150

merged 2 commits into from
May 7, 2024

Conversation

arvindkrishnakumar-okta
Copy link
Contributor

@arvindkrishnakumar-okta arvindkrishnakumar-okta commented May 2, 2024

Issue(s)

OKTA-721225

Description

Add DPoP support.

https://datatracker.ietf.org/doc/html/rfc9449#section-4.2

Category

  • Bugfix
  • Enhancement
  • New Feature
  • Library Upgrade
  • Configuration Change
  • Versioning Change
  • Unit or Integration Test(s)
  • Documentation

Signoff

  • I have submitted a CLA for this PR
  • Each commit message explains what the commit does
  • I have updated documentation to explain what my PR does
  • My code is covered by tests if required
  • I did not edit any automatically generated files

- Add DPoPInterceptor when authentication with PRIVATE_KEY
- Supports nonce refreshing
@arvindkrishnakumar-okta arvindkrishnakumar-okta marked this pull request as draft May 2, 2024 14:17
@arvindkrishnakumar-okta arvindkrishnakumar-okta changed the title [DRAFT] Add automatic support for DPoP (#1089) [DRAFT] Add automatic support for DPoP May 2, 2024
@arvindkrishnakumar-okta arvindkrishnakumar-okta marked this pull request as ready for review May 3, 2024 16:17
@arvindkrishnakumar-okta arvindkrishnakumar-okta changed the title [DRAFT] Add automatic support for DPoP Add automatic support for DPoP May 3, 2024
@arvindkrishnakumar-okta arvindkrishnakumar-okta merged commit 596a52a into master May 7, 2024
8 of 9 checks passed
@@ -113,7 +129,7 @@ private void processRequest(HttpRequest request, boolean tokenRequest) {

private String getUriWithoutQueryString(HttpRequest request) {
try {
return StringUtils.substringBefore(request.getUri().toString(), "?");
return URLDecoder.decode(StringUtils.substringBefore(request.getUri().toString(), "?"), StandardCharsets.UTF_8);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@arvindkrishnakumar-okta This method is only available since Java 10 => will break Java 8/9 users.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants