Skip to content

feat(tokenexchange): add EC key support and Entra ID federated auth style#1147

Merged
matzew merged 1 commit into
containers:mainfrom
nader-ziada:entra-spiffy
May 12, 2026
Merged

feat(tokenexchange): add EC key support and Entra ID federated auth style#1147
matzew merged 1 commit into
containers:mainfrom
nader-ziada:entra-spiffy

Conversation

@nader-ziada
Copy link
Copy Markdown
Collaborator

  • Add ECDSA P-256/P-384 key support for JWT client assertions, enabling SPIRE X.509-SVIDs in the OBO flow.
  • Add new "federated" auth style that reads external IdP JWTs from a file for Entra ID workload identity federation.

reference: https://learn.microsoft.com/en-us/entra/workload-id/workload-identity-federation

…tyle

Add ECDSA P-256/P-384 key support for JWT client assertions, enabling
SPIRE X.509-SVIDs in the OBO flow. Add new "federated" auth style that
reads external IdP JWTs from a file for Entra ID workload identity federation.

Signed-off-by: Nader Ziada <nziada@redhat.com>
Copy link
Copy Markdown
Collaborator

@matzew matzew left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matzew matzew merged commit 60b21ad into containers:main May 12, 2026
26 of 29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants