]
Michael Musgrove updated JBTM-3309:
-----------------------------------
Fix Version/s: 5.next
Investigate using MicroProfile JSON Web Token to secure interaction
with an LRA coordinator
-------------------------------------------------------------------------------------------
Key: JBTM-3309
URL:
https://issues.redhat.com/browse/JBTM-3309
Project: JBoss Transaction Manager
Issue Type: Enhancement
Components: LRA
Affects Versions: 5.10.4.Final
Reporter: Michael Musgrove
Assignee: Mayank Kunwar
Priority: Critical
Fix For: 5.next
The Narayana implementation of the MicroProfile LRA specification uses a JAX-RS filter to
communicate with a remote coordinator. The interaction is currently insecure. This issue
is to investigate the best way of securing this channel. Since the JAX-RS filter is
applied to the MicroProfile service we should initially investigate the MicroProfile
security solution (MicroProfile JSON Web Token).