Skip to content

feat: [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService#1142

Merged
Jonas-Isr merged 3 commits intomainfrom
fix/oauth2-rotate-ztis-certificates-in-place
Apr 9, 2026
Merged

feat: [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService#1142
Jonas-Isr merged 3 commits intomainfrom
fix/oauth2-rotate-ztis-certificates-in-place

Conversation

@MatKuhr
Copy link
Copy Markdown
Member

@MatKuhr MatKuhr commented Apr 9, 2026

Context

#1134

Feature scope:

Improves OAuth2Service to dynamically re-create HTTP clients for ZTIS certificates. This causes destinations loaded via ServiceBindingDestinationLoader to function indefinitely (via the object reference chain OAuth2Service <- OAuth2HeaderProvider <- HttpDestination).

However, this improvement does NOT address the KeyStore attached directly to HttpDestination, which is needed for the IAS App2Service communication pattern.

Definition of Done

  • Functionality scope stated & covered
  • Tests cover the scope above
  • Error handling created / updated & covered by the tests above
  • Documentation updated
  • Release notes updated

@MatKuhr MatKuhr marked this pull request as ready for review April 9, 2026 14:59
@MatKuhr MatKuhr changed the title Potential ZTIS Enhancement [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService Apr 9, 2026
@MatKuhr MatKuhr changed the title [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService feat: [Connectivity] Improve Certificate Rotation with ZTIS for OAuth2TokenService Apr 9, 2026
Copy link
Copy Markdown
Member

@Jonas-Isr Jonas-Isr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Jonas-Isr Jonas-Isr merged commit 79820ef into main Apr 9, 2026
13 checks passed
@Jonas-Isr Jonas-Isr deleted the fix/oauth2-rotate-ztis-certificates-in-place branch April 9, 2026 15:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants