Ralph
Reputation: 4868
Jakarta EE 10 - OIDC and Programatic Login?
Since Jakarta EE 10 it is easily possible to protect your web application with OpenID Connect, using the new @OpenIdAuthenticationMechanismDefinition annotation.
This works perfect and is quite easy to use. As a user you will be redirected to your Authentication Authority Server, Login, and redirected back into your app. A good tutorial can be found in Andrew Hughes Blogpost.
Now I wonder: When I have secured my web app with OIDC, how can a backend task or microservice connect to the app without the redirection via the web browser? Is there a way to make a programmatic login? At least to receive a valid Bearer/JWT/JSESSIONID token?
Upvotes: 2
Views: 436
Answers (0)
Related Questions
- What is the difference between JSF, Servlet and JSP?
- What's the difference between OpenID and OAuth?
- Integrating Spring Security with Jakarta EE 8 Security and JSF?
- OpenID Connect JWT token verification and usage strategy for backend api - jwks or session?
- How can a Python Microservice verify requests using a JWT in an Authorization header?
- Issuing JWT token myself versus using IdentityServer4(OIDC) for Web API
- Develop OpenIdConnect Server