Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide Vert.x OIDC to Quarkus OIDC migration guides #45011

Open
sberyozkin opened this issue Dec 9, 2024 · 1 comment
Open

Provide Vert.x OIDC to Quarkus OIDC migration guides #45011

sberyozkin opened this issue Dec 9, 2024 · 1 comment
Labels

Comments

@sberyozkin
Copy link
Member

Description

Vert.x OIDC users are experiencing difficulties with migrating to Quarkus OIDC, likely due to the following reasons:

  • Vert.x OIDC setup is programmatic and/or aligned with how routes are setup, while Quarkus OIDC setup is mainly configuration driven
  • Vert.x OIDC prefers and only supports stateful session management as a security preference, Quarkus OIDC uses stateless (encrypted cookie) session management by default

Quarkus should provide probably two guides for Vert.x users who do not mind migrating to work with:

  • Migration guide for migrating OIDC authorization code flow applications
  • Migration guide for migrating OIDC bearer token applications

Implementation ideas

We can use either Quarkus Redis or DB state extension to support stateful sessions for migrating code flow applications. May be we can also ship a test module with a TokenStateManager bean to allow using in-mem session management during tests or devmode.

There should be no problems with migrating bearer token applications

@sberyozkin sberyozkin added the kind/enhancement New feature or request label Dec 9, 2024
Copy link

quarkus-bot bot commented Dec 9, 2024

/cc @pedroigor (oidc)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant