The OidcAuthorizer (security remediation plan §6): privileged-operation
authorization deferred to JWT scopes minted by the organization's identity
provider, validated with Nimbus JOSE+JWT against a cached JWKS. Optional:
fleets on the mtls profile use the MembershipAuthorizer and never load this
module.
Compile Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Apache 2.0
| | ai.badmonkey.agentspaces
»
agentspaces-api The public API and SPI: the Space interface and template DSL, leases, entry records, | 0.2.0 | ✔ |
Apache 2.0
| | ai.badmonkey.agentspaces
»
agentspaces-common Shared foundations: hybrid logical clocks, identifiers and the aspace URI scheme, | 0.2.0 | ✔ |
Cache Impl
Apache 2.0
|  | com.github.ben-manes.caffeine
»
caffeine Caffeine is a high performance, near optimal caching library. It provides an in-memory cache using a Google Guava ... | 3.2.0 | 3.3.0 |
Encryption Lib
Apache 2.0
|  | com.nimbusds
»
nimbus-jose-jwt Java library for Javascript Object Signing and Encryption (JOSE) and | 10.3 | 10.10 |