RFC7523: Store the payload of the supplied JWT for later use in token hook in Hydra about fosite HOT 6 CLOSED

Hi @sgal thank you for the feature request. To be honest, I'm not quite sure if I understand what behavioral change you would require for this feature in fosite? Do you want to store the JSON Web Token used as part of the jwt-bearer requires in the database?

from fosite.

Yes, that's what I had in mind. Not the entire JWT though, just a payload would be enough. I'm not sure if DB persistence would be required given that jwt-bearer is a single-step operation. If it can be stored in memory, I would probably prefer that - less changes in the codebase and less ways to break things.

from fosite.

I think that the webhooks have access to the request URL (I might be mistaken though). If that is the case, the JWT would be part of that request URL and could be processed by the webhook target. Would taht be an acceptable solution?

from fosite.

That would be perfect!

from fosite.

Is this the method to use

from fosite.

Yes, that should be it

from fosite.