Resolve scopes in an oidcSecurityContext

[rsoika]

If the workflow engine runs in Wildfly using the new elytron-oidc-subsystem we can provide an additional (but proprietary) plugin to resolve the scopes provided in the security context.

Jakarta 10

For jakarta EE 10 possible we can use a generic solution to resolve claims:

@OpenIdAuthenticationMechanismDefinition( //
        clientId = "${oidcConfig.clientId}", //
        clientSecret = "${oidcConfig.clientSecret}", //
        redirectURI = "${baseURL}/callback", //
        providerURI = "${oidcConfig.issuerUri}" //
)
.....
    @Inject
    private OpenIdContext context;
 ....
     System.out.println("  Subject = " + context.getSubject());
                System.out.println("  Access token = " + context.getAccessToken());
                System.out.println("  ID token = " + context.getIdentityToken());
                System.out.println("  Claims json = " + context.getClaimsJson());
                System.out.println("=========================================");
                message = "Imixs-Security-OIDC ==> OK \n" + //
                        "User Principal      ==> " + principal.getName()
                        + "\n\nSession details are available on server log";

Wildfly

See the example here

It looks like we just need to get the OidcSecurityContext class from the HttpServletRequest and parse the scopes

We can implement a WIldflyOidcSecrutiyContextPlugin that can be added into a profile worklfow in the same way as we do it with the LDAPPlugin