Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
This task is to refactor the AbstractJWTFilter implementations. Both the SSOCookieFederationFilter + the JWTFederationFilter have logic that can be abstracted and placed in the AbstractJWTFilter. In particular, both filters should share the same validation logic for verifying tokens.
As part of this fix, the SSOCookieFederationFilter verifies that the issuer is "KNOXSSO" as per the discussion on the mailing list.