Skip to content

Conversation

@arxioly
Copy link
Contributor

@arxioly arxioly commented Oct 22, 2025

Description

Linked to #3974

  • Use library jose4j https://github.com/ere-health/jose4j for signing JWTs (PATs, SAF-provider JWTs and LTPA-based JWTs). This library is a pure JCA implementation and works with ICSF hardware keys.
  • Update startup procedure to override java security cryptography providers, including hybrid (default) and IBMJCACCA providers.
  • First steps in attempting to unify libraries used in JWT handling in the project. With this PR there are a total of three libraries still used (JJWT, Jose4j and nimbus JOSE JWT)

Type of change

  • feat: New feature (non-breaking change which adds functionality)

Checklist:

  • My code follows the style guidelines of this project
  • PR title conforms to commit message guideline ## Commit Message Structure Guideline
  • I have commented my code, particularly in hard-to-understand areas. In JS I did provide JSDoc
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • The java tests in the area I was working on leverage @nested annotations
  • Any dependent changes have been merged and published in downstream modules

Pablo Carle and others added 22 commits October 10, 2025 12:11
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: nxhafa <nxhafa11@gmail.com>
Signed-off-by: nxhafa <nxhafa11@gmail.com>
Signed-off-by: nxhafa <nxhafa11@gmail.com>
Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>
Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>
Signed-off-by: nxhafa <nxhafa11@gmail.com>
# Conflicts:
#	apiml-package/src/main/resources/bin/start.sh
@github-actions github-actions bot added the Sensitive Sensitive change that requires peer review label Oct 22, 2025
arxioly and others added 2 commits October 22, 2025 18:38
Signed-off-by: Elena Kubantseva <elena.kubantseva@broadcom.com>
Pablo Carle and others added 8 commits October 24, 2025 16:55
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: Pablo Carle <pablo.carle@broadcom.com>
Signed-off-by: nxhafa <nxhafa11@gmail.com>
@EvaJavornicka EvaJavornicka moved this from New to In Progress in API Mediation Layer Backlog Management Oct 29, 2025
@sonarqubecloud
Copy link

@arxioly arxioly merged commit eeb3ade into v3.x.x Oct 29, 2025
38 checks passed
@arxioly arxioly deleted the reboot/jwt-hw-poc branch October 29, 2025 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Sensitive Sensitive change that requires peer review size/XXL

Projects

Development

Successfully merging this pull request may close these issues.

4 participants