-
Type: Task
-
Resolution: Unresolved
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Security 2024-07-08, Security 2024-07-22, Security 2024-08-05, Security 2024-08-19, Security Frozen Work
The AuthSessionTokenManager provides the backbone of JWK management in this project. Build the AuthSessionTokenManager, and create the JWKDocument that will represent a JWK stored on disk in the jwks collection.
The router and shard specific implementations will be done in future tickets.
Design links: AuthSessionTokenManager and JWKDocument.
Acceptance Criteria: There is a virtual base class with the ability to generate JWKs and to sign and validate tokens. There is a mock class implementation of this function to facilitate future testing. There is a new IDL struct, JWKDocument.
- depends on
-
SERVER-91641 Extend JWSValidator to sign JWTs
- Needs Merge
- is depended on by
-
SERVER-91651 Implement JWT Expiration
- Open
-
SERVER-91645 Build the shard implementation of AuthSessionTokenManager
- Needs Scheduling
-
SERVER-91665 Extend AuthorizationSession to authenticate Clients with access tokens
- Needs Scheduling