feat(oidc): JWT userinfo support for eSignet [DHIS2-20043]#23839

Draft

netroms wants to merge 27 commits into

feat/DHIS2-20043-esignet-oidc-jwt-userinfo

Commits on May 6, 2026

docs(oidc): add design spec for eSignet JWT userinfo support [DHIS2-20043]

netroms
and
claude
committed
docs(oidc): add implementation plan for eSignet JWT userinfo support [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): add UserInfoResponseType enum [DHIS2-20043]
netroms
committed
feat(oidc): add JWS algorithm allow-list for userinfo verification [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): add user_info_response_type and user_info_jws_algorithm config keys [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): track userInfo response type and JWS algorithm on registration [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): validate userinfo response type and relax client_secret under private_key_jwt [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): tighten missing-secret check and add direct builder tests [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): add per-registration JWKSource cache [DHIS2-20043]

netroms
and
claude
committed
build: enable ByteBuddy experimental flag for Java 21 test runs [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): add SignedJwtUserInfoLoader for application/jwt userinfo [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): branch DhisOidcUserService on userInfoResponseType [DHIS2-20043]

netroms
and
claude
committed
feat(oidc): include x509 cert thumbprint in published JWK [DHIS2-20043]

netroms
and
claude
committed

Commits on May 7, 2026

Commits on May 11, 2026

Commits on May 24, 2026

Commits on May 25, 2026