Skip to content

Refactor JWTTokenProvider to accept KmsClient directly#413

Closed
mcollins-ttd wants to merge 3 commits into
sch-UID2-4739-credentials-provider-fixfrom
mkc-UID2-4739-credentials-provider-fix
Closed

Refactor JWTTokenProvider to accept KmsClient directly#413
mcollins-ttd wants to merge 3 commits into
sch-UID2-4739-credentials-provider-fixfrom
mkc-UID2-4739-credentials-provider-fix

Conversation

@mcollins-ttd

@mcollins-ttd mcollins-ttd commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

Replace the Supplier<KmsClientBuilder> + JsonObject constructor
with a pre-built KmsClient, and extract buildKmsClient(JsonObject)
as a static factory.

Make JwtSigningException a static nested class so callers no longer
need an enclosing instance to construct it.

Update OperatorJWTTokenProvider to accept explicit issuerUrl and
optOutUrl strings instead of a raw config object. Wire everything up
in Main.

Fix comments about sub and aud claims.

Fix swapped issuer/audience in debug log.

Replace the `Supplier<KmsClientBuilder>` + `JsonObject` constructor
with a pre-built `KmsClient`, and extract `buildKmsClient(JsonObject)`
as a static factory.

Make `JwtSigningException` a static nested class so callers no longer
need an enclosing instance to construct it.

Update `OperatorJWTTokenProvider` to accept explicit `issuerUrl` and
`optOutUrl` strings instead of a raw config object. Wire everything up
in `Main`.
@mcollins-ttd mcollins-ttd changed the title Mkc UI d2 4739 credentials provider fix Refactor JWTTokenProvider to accept KmsClient directly Jun 17, 2026
@mcollins-ttd mcollins-ttd deleted the mkc-UID2-4739-credentials-provider-fix branch June 17, 2026 22:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant