Page History

...

Create a new `SaslExtensions` class that takes most of the generalizable logic from `ScramExtensions`. `ScramExtensions` will extend `SaslExtensions`
Create a new `SaslExtensionsCallback` which will be similar to `ScramExtensionsCallback`. `ScramExtensionsCallback` will NOT extend `SaslExtensionsCallback` since it will not support the new `SaslExtensions` class.
Pass `SaslExtensionsCallback` to the callback handler of `OAuthBearerLoginModule` so that the handler can parse the extensions from the JAAS config (unsecuredLoginExtension_xxx) and populate them in the Subject class. The default `OAuthBearerUnsecuredLoginCallbackHandler` will be updated with this behavior.
Pass `SaslExtensionsCallback` to the callback handler of `OAuthBearerSaslClient` so that the handler can take the extensions from the Subject and populate them in the callback. The default `OAuthBearerSaslClientCallbackHandler` will be updated to handle the callback. `OAuthBearerSaslClient`
`OAuthBearerSaslClient` will then attach the populated extensions (if any) to the first client message.

Have `OAuthBearerServer` parse sent extensions and expose them via its `OAuthBearerServer#getNegotiatedProperty()` method. It will use a strict regex, parsing only letters for keys and only ASCII characters for values

...