KNOX-3405: Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange - #1340

Open

hsheinblatt wants to merge 13 commits into

apache:knox_idffrom

hsheinblatt:KNOX-3405-08-06

Commits on Jul 23, 2026

Knox as OIDC Provider (#1215)
smolnar82
committed
be0c4ed
KnoxIDF - Fixed pylint and test issues in Docker-based tests
smolnar82
committed
ca62c98
KNOX-3355 - Add TrustedOidcIssuerService schema and interface (#1311)

authored and
smolnar82
committed
11acc7e
KNOX-3355 - Add OIDCDiscoveryHelper, JdbcTrustedOidcIssuerService, and TrustedOidcIssuerServiceFactory (#1315)

hsheinblatt
authored and
smolnar82
committed
0ac3eca
KNOX-3390 - Address comments in PR 1315 (#1320)

hsheinblatt
authored and
smolnar82
committed
dfdd98f
KNOX-3390: Moved gateway-level config to GatewayConfig and implemented the missing methods (#1322)
smolnar82
committed
c0eb9b5

Commits on Jul 24, 2026

Commits on Aug 6, 2026

KNOX-3368 - Switch KNOXIDF_ADMIN to single-role pattern with PathAclsAuthz (#1337)

hsheinblatt
and
Harrison
authored
77c775b
KNOX-3408 - Allow no actor token in JWTFederationFilter.handleTokenExchange (#1339)

hsheinblatt
and
Harrison
authored
e9c2ab0
KNOX-3405 - Extend JWTFederationFilter for dynamic JWKS and iss attribute on token-exchange
Harrison
committed
d8250d5

Commits on Aug 7, 2026

Fix unit tests to be unambiguous, the negative tests to be order of validation
Harrison
committed
3a0d294