{"action":"created","issue":{"url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/310","repository_url":"https://api.github.com/repos/OrchardCMS/Orchard2","labels_url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/310/labels{/name}","comments_url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/310/comments","events_url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/310/events","html_url":"https://github.com/OrchardCMS/Orchard2/issues/310","id":187490917,"number":310,"title":"Consider using the default access token format instead of JWT","user":{"login":"PinpointTownes","id":6998306,"avatar_url":"https://avatars.githubusercontent.com/u/6998306?v=3","gravatar_id":"","url":"https://api.github.com/users/PinpointTownes","html_url":"https://github.com/PinpointTownes","followers_url":"https://api.github.com/users/PinpointTownes/followers","following_url":"https://api.github.com/users/PinpointTownes/following{/other_user}","gists_url":"https://api.github.com/users/PinpointTownes/gists{/gist_id}","starred_url":"https://api.github.com/users/PinpointTownes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PinpointTownes/subscriptions","organizations_url":"https://api.github.com/users/PinpointTownes/orgs","repos_url":"https://api.github.com/users/PinpointTownes/repos","events_url":"https://api.github.com/users/PinpointTownes/events{/privacy}","received_events_url":"https://api.github.com/users/PinpointTownes/received_events","type":"User","site_admin":false},"labels":[{"id":429647461,"url":"https://api.github.com/repos/OrchardCMS/Orchard2/labels/Orchard.OpenId","name":"Orchard.OpenId","color":"bfdadc","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2016-11-05T11:12:54Z","updated_at":"2016-11-22T21:32:35Z","closed_at":null,"body":"The OpenID module currently uses JWT tokens instead of the default encrypted format, that relies on Data Protection.\r\n\r\nThis requires using the JWT bearer middleware, which uses discovery to retrieve the signing credentials from OpenIddict's discovery endpoint. Unfortunately, this doesn't work well when people choose to use SSL and a self-signed certificate, as the `HttpClient` used by the JWT middleware will block the discovery request if the certificate is not fully trusted.\r\n\r\nInstead, we may consider using the default token format + the OAuth2 validation middleware, that doesn't use HTTP discovery.\r\n\r\n@jersiovic @sebastienros thoughts?"},"comment":{"url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/comments/262372059","html_url":"https://github.com/OrchardCMS/Orchard2/issues/310#issuecomment-262372059","issue_url":"https://api.github.com/repos/OrchardCMS/Orchard2/issues/310","id":262372059,"user":{"login":"sebastienros","id":1165805,"avatar_url":"https://avatars.githubusercontent.com/u/1165805?v=3","gravatar_id":"","url":"https://api.github.com/users/sebastienros","html_url":"https://github.com/sebastienros","followers_url":"https://api.github.com/users/sebastienros/followers","following_url":"https://api.github.com/users/sebastienros/following{/other_user}","gists_url":"https://api.github.com/users/sebastienros/gists{/gist_id}","starred_url":"https://api.github.com/users/sebastienros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebastienros/subscriptions","organizations_url":"https://api.github.com/users/sebastienros/orgs","repos_url":"https://api.github.com/users/sebastienros/repos","events_url":"https://api.github.com/users/sebastienros/events{/privacy}","received_events_url":"https://api.github.com/users/sebastienros/received_events","type":"User","site_admin":false},"created_at":"2016-11-22T21:32:35Z","updated_at":"2016-11-22T21:32:35Z","body":"Same thing, OpenId site settings, the same page as for the certificate."}}
{"actor":{"display_login":"sebastienros"}}