keycloak is using jwt token, the JWTMeshAuthandler authenticates it but is not invoking the keycloakPlugin..

[bbelghith]

Dear colleagues,
at the moment i am facing a challenge here with your code. Our keycloak is issuing jwt token and they are validated by the
MeshJWTHandler which does not invoke any plugins for keycloak and no keycloak users gets created.

I see that only MeshOAUTH2Service is invoking such plugins - it never gets invoked when the authentication with mesjwthandler fails.

What can i do?

BTW, i have changed the gentics mesh algorithm from HS256 to RS256 according to your documentation - but it does not pick it up - because in jwtoptions is the algorithm "HS256" hard-coded.

public class JWTOptions {

private static final JsonObject EMPTY = new JsonObject(Collections.emptyMap());

private int leeway = 0;
private boolean ignoreExpiration;
private String algorithm = "HS256";
private JsonObject header = EMPTY;

Gentics Mesh Version, operating system, or hardware.

• v1.7.1

Operating System

• Linux
• MacOSX
• Windows
• Other, name?

JVM

• Oracle JDK 1.8.0_100
• Open JDK 1.8.0_100

Problem

Reproducer

Expected behaviour and actual behaviour