Validate standard JWT claims and extract custom claims into FilterContext for downstream filters.
Requirements
- Validate standard claims:
iss (issuer), aud (audience), exp (expiration), nbf (not before)
- Configurable required vs optional claims
- Extract arbitrary claims into FilterContext metadata
- Promote claims to request headers (configurable mapping)
- Support nested claim paths (e.g.
realm_access.roles)
Implementation Notes
- Claims extraction runs after successful signature verification
- Extracted claims available to all downstream filters via FilterContext
Parent epic: #12
Validate standard JWT claims and extract custom claims into FilterContext for downstream filters.
Requirements
iss(issuer),aud(audience),exp(expiration),nbf(not before)realm_access.roles)Implementation Notes
Parent epic: #12