[CXF-7696] Allow JWT aud claim to accept wildcards / nested resources

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 3.2.4
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Jo Evans
• Created: 04/Apr/18 06:47
• Updated: 14/Jun/18 09:22

Description

Allowing explicit audiences vs wildcards i.e. allowing a resource to also include all its sub-resources - this would reduce the token size which does not scale well if the token has to contain multiple aud claims

Issue Links

• is related to: CXF-7693 Allow JWT audience claims validation not RFC 7519 compliant
• links to: GitHub Pull Request #400