[KNOX-853] JWTFederationToken to be Refactored to Comply with KnoxToken Use

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.12.0
• Component/s: Server
• Labels: kip-4
• Assignee: Larry McCay
• Reporter: Larry McCay
• Created: 14/Jan/17 16:45
• Updated: 28/Mar/19 14:17
• Resolved: 05/Feb/17 21:39

Description

Need to align the existing JWTFederationFilter to validate the claims in the KnoxToken API access token in terms of issuer and audience claims.

Also, need to make sure that tokens issued for specific topologies and services are constrained to those resources. At time same time, allow for cross topology use as well depending on the claims in the token.