Quarkus Security and OIDC/JWT Identity Providers: Boundary Between Bearer-Token Validation and Credential-Expiration Enforcement
Quarkus Security provides pluggable authentication mechanisms, including OIDC authorization-code flow, bearer-token validation, and custom authenticators. An OIDC or JWT identity provider separately manages token issuance, lifetimes, and refresh. At the integration boundary between these components, an unresolved question remains: when a credential is expire