Security Tracker for 1.0

[stuartwdouglas]

This is a tracker issue for all Security issues that should be part of 1.0.

• (deferred) JPA Identity Provider (optional) Add a JPA Identity Extension #4347

• FORM based auth support for simple applications (essential) Implement Vert.x based FORM auth in the new security layer #4348
• CDI security interceptor for @RolesAllowed etc (essential) CDI security interceptor for @RolesAllowed, etc #4334
• Unified HTTP permissions layer (essential) Add HTTP Permission Layer #4349
• HashiCorp Vault: Support distributed configuration with HashiCorp Vault #2764 (mostly done)
• Elytron JDBC IdentityProvider: Enhance Elytron Security extension to support a database as identity store #3586 (mostly done)
• OIDC enhancements - (To be assigned to Pedroigor)

[rsvoboda]

Sorry, miss-click :(

[paulrobinson]

@stuartwdouglas is this still an accurate list of what's needed for this Epic for 1.0.0?

[stuartwdouglas]

yes, although exactly what is required for OIDC is still up in the air. I don't think all the OIDC enhancements will make it for 1.0

[paulrobinson]

Who is needed to decide which OIDC enhancements are 'in'?

[paulrobinson]

@stuartwdouglas Can you add assignees to these issues please?

#4347 Add a JPA Identity Extension
#2764 Support distributed configuration with HashiCorp Vault
#3586 Enhance Elytron Security extension to support a database as identity store

[paulrobinson]

@stuartwdouglas Is this Epic complete now? Can you move to 'Review' state if it needs any final review, or 'done' if it's totally finished.

We're using the Epic board to track this: https://github.com/orgs/quarkusio/projects/5

[paulrobinson]

@stuartwdouglas is this all done for 1.0.0.Final now?