The OidcAuthorizer (security remediation plan §6): privileged-operation
authorization deferred to JWT scopes minted by the organization's identity
provider, validated with Nimbus JOSE+JWT against a cached JWKS. Optional:
fleets on the mtls profile use the MembershipAuthorizer and never load this
module.
This artifact is declared in 1 BOMs
Licenses
| License | URL |
|---|---|
| Apache License, Version 2.0 | https://www.apache.org/licenses/LICENSE-2.0 |
Developers
| Name | Dev Id | Roles | Organization | |
|---|---|---|---|---|
| Al Baker | al<at>badmonkey.ai | albaker | architect, developer | Bad Monkey, Inc. |