{"action":"closed","issue":{"url":"https://api.github.com/repos/wso2/product-is/issues/2335","repository_url":"https://api.github.com/repos/wso2/product-is","labels_url":"https://api.github.com/repos/wso2/product-is/issues/2335/labels{/name}","comments_url":"https://api.github.com/repos/wso2/product-is/issues/2335/comments","events_url":"https://api.github.com/repos/wso2/product-is/issues/2335/events","html_url":"https://github.com/wso2/product-is/issues/2335","id":297059015,"number":2335,"title":"Integrate DB backed service provider public certs into OIDC Request object validation logic","user":{"login":"mefarazath","id":5237653,"avatar_url":"https://avatars1.githubusercontent.com/u/5237653?v=4","gravatar_id":"","url":"https://api.github.com/users/mefarazath","html_url":"https://github.com/mefarazath","followers_url":"https://api.github.com/users/mefarazath/followers","following_url":"https://api.github.com/users/mefarazath/following{/other_user}","gists_url":"https://api.github.com/users/mefarazath/gists{/gist_id}","starred_url":"https://api.github.com/users/mefarazath/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mefarazath/subscriptions","organizations_url":"https://api.github.com/users/mefarazath/orgs","repos_url":"https://api.github.com/users/mefarazath/repos","events_url":"https://api.github.com/users/mefarazath/events{/privacy}","received_events_url":"https://api.github.com/users/mefarazath/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/wso2/product-is/milestones/20","html_url":"https://github.com/wso2/product-is/milestone/20","labels_url":"https://api.github.com/repos/wso2/product-is/milestones/20/labels","id":3116059,"number":20,"title":"5.5.0-alpha","description":"","creator":{"login":"mefarazath","id":5237653,"avatar_url":"https://avatars1.githubusercontent.com/u/5237653?v=4","gravatar_id":"","url":"https://api.github.com/users/mefarazath","html_url":"https://github.com/mefarazath","followers_url":"https://api.github.com/users/mefarazath/followers","following_url":"https://api.github.com/users/mefarazath/following{/other_user}","gists_url":"https://api.github.com/users/mefarazath/gists{/gist_id}","starred_url":"https://api.github.com/users/mefarazath/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mefarazath/subscriptions","organizations_url":"https://api.github.com/users/mefarazath/orgs","repos_url":"https://api.github.com/users/mefarazath/repos","events_url":"https://api.github.com/users/mefarazath/events{/privacy}","received_events_url":"https://api.github.com/users/mefarazath/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":2,"state":"open","created_at":"2018-02-14T11:15:08Z","updated_at":"2018-02-14T11:19:29Z","due_on":"2018-02-15T08:00:00Z","closed_at":null},"comments":0,"created_at":"2018-02-14T11:18:11Z","updated_at":"2018-02-14T11:19:29Z","closed_at":"2018-02-14T11:19:29Z","author_association":"MEMBER","body":"In our previous iterations the public certificate of the Service Provider (OAuth Client) used to validate signature of the Request Object was retrieved from the tenant keystore. (ie. It was imported to the tenant keystore with the alias set to client_id).\r\n\r\nSince we now have the capability to store the Service Provider public certificate in the DB (From improvements done in wso2/carbon-identity-framework#1304) we can improve the request object signature validation logic to retrieve the public cert from DB rather than the key store.\r\n\r\nThis essentially means we are going to stop supporting public certs of Service Providers imported to keystores and will only considering public certs added to the DB."}}
{"actor":{"display_login":"mefarazath"}}