[KNOX-2563] Metadata for server-managed token state should include everything needed for validation

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.6.0
• Component/s: Server
• Assignee: Unassigned
• Reporter: Philip Zampino
• Created: 25/Mar/21 17:57
• Updated: 25/Mar/21 20:59

Description

In light of KNOX-2556, the metadata for server-managed token state should include everything needed for validation, including:

• intended audience(s)
• NotBeforeTime

such that the JWTProvider can more thoroughly validate a token UUID presented as a HTTP Basic password.