[IMPALA-12232] Verify JWT Audience and Issuer Claims

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Backend, Security
• Labels: Impala JWT impala jwt security
• Epic Color: ghx-label-11
• Assignee: Jason Fehr
• Reporter: Jason Fehr
• Created: 21/Jun/23 21:27
• Updated: 16/Jul/24 23:56

Description

RFC 8725 contains JWT best practices that state the audience ("AUD") and issuer ("ISS") claims from a JWT should be validated if they are present. Impala currently has no mechanism to validate these claims.

Implement ISS claim validation and AUD claim validation.