OAuth/JWT-autentisering - #232

Open

fredrbus wants to merge 40 commits into

mainfrom

jwt-autentisering

Commits on Sep 23, 2026

Add JWT/mTLS authentication
fredrbus
committed
f0e4720
Rewrite RequestContentHashFilter as interceptor
fredrbus
committed
dfc261d
Set "request-path" attrubute in own interceptor
fredrbus
committed
434a38d
Make authentication method explicit
fredrbus
committed
9c2f5fa
Add docs for v19
fredrbus
committed
fdfe128
Redirect docs root only to current version
fredrbus
committed
3b14532
Fix scope structure
fredrbus
committed
fb68e81
Derive OAuth resource from DigipostClientConfig
fredrbus
committed
422a7a3
Align examples in docs with recent changes
fredrbus
committed
ee5943f
Fail fast when signing unhashed content
fredrbus
committed
e927701
DigipostClientException when token retrieval fails
fredrbus
committed
ae66117
Clamp token cache to a positive duration
fredrbus
committed
df1ebe2
Test MutualTlsTokenProvider with local endpoint
fredrbus
committed
1dca8eb
Replace AuthMode with two factory methods
fredrbus
committed
1c76ba7
Log interceptor events under one logger
fredrbus
committed
8eb7e8f
Decouple RequestBearerTokenInterceptor from the token provider
fredrbus
committed
380c916
Req.HttpReq.PathInterceptor to Req.PathInterceptor
fredrbus
committed
1da5598
Document params on the factory methods
fredrbus
committed
fe8a9f0
Link to API-docs
fredrbus
committed
aa2f0f8
Handle token endpoint responses without body
fredrbus
committed
5b3fbfa
MutualTlsTokenProvider implements Closeable
fredrbus
committed
4c5ba68
Configurable timeouts for MutualTlsTokenProvider
fredrbus
committed
9642187
Fix botched markdown-links
fredrbus
committed
5c8820b
Remove hash-check in RequestSignatureInterceptor
fredrbus
committed
2bae4d9
Mark cert-auth as legacy in docs
fredrbus
committed
2a57bfd
Use TlsSocketStrategy, not SslConnectionFactory
fredrbus
committed
cdabf98
Close all http resources owned by the client
fredrbus
committed
0cf8eb8
Use a no-op AutoCloseable, not a nullable field
fredrbus
committed
155a3c1
Retry one time with new access token on 401
fredrbus
committed
8275a70
Reseed the v19 docs from v18
fredrbus
committed
5be4699
Migrate the example code to JWT/mTLS authentication
fredrbus
committed
a7c4992
Authenticate the Swing demo client with JWT/mTLS
fredrbus
committed
37c0b29
Remove certificate authenticating factory methods
fredrbus
committed
2a59f6b
Delete the request signing code
fredrbus
committed
34c0b94
Drop the unused CryptoUtil methods
fredrbus
committed
c243e5f
Rename the client factory method to create
fredrbus
committed
c68d1b4
Drop the http client factory function
fredrbus
committed
61b63d9
Document JWT/mTLS as the only auth method
fredrbus
committed
a1527eb

Commits on Sep 24, 2026

Clarify the 401 retry wording in the docs
fredrbus
committed
a5c07e9
Stop sharing the token client's SSL context with the API client
fredrbus
committed
6684b5b