[NIFI-5302] Add Support for Client Credentials Flow with OIDC Access Tokens

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M3
• Labels: security
• Assignee: David Handermann
• Reporter: Federico Michele Facca
• Created: 12/Jun/18 13:46
• Updated: 10/May/24 16:18
• Resolved: 25/Apr/24 16:33

Description

Currently OIDC is only supported via implicit grant flow. This is perfectly fine for the UI, but it makes impossible to programmatically interact with the APIs using OIDC.

Issue Links

• fixes: NIFI-12317 REST API Rejects Keycloak OIDC Access Tokens with HTTP 401
• is superceded by: NIFI-12550 Support OIDC Device Authorization Grant for API
• relates to: NIFI-11014 JWT token is rejected by NiFi when calling APIs
• relates to: NIFI-12317 REST API Rejects Keycloak OIDC Access Tokens with HTTP 401
• links to: GitHub Pull Request #8532