WebSphere Liberty

Enable DPoP support on OAuth 2.0 under z/OS Connect Enterprise Edition

We have noticed several types of frauds when using tokens via OAuth 2.0. To address this issue, RFC 9449 was published with the implementation of DPoP (Demonstrating Proof of Possession.) "DPoP is an OAuth security extension for binding tokens to ...

3 months ago in WebSphere Liberty 11 Future consideration

25 VOTE

Add OAuth 2.0 mTLS support to Liberty’s native oauth-2.0 provider, specifically around RFC 8705 behavior

For our IBM OpenPages product, one of our Customers in Brazil is especially escalating the need for OAuth 2.0 mTLS support Here is the internal Slack discussion for your reference: https://ibm-cloudplatform.slack.com/archives/C30NGTBFS/p1770919784...

3 months ago in WebSphere Liberty 1 Future consideration

50 VOTE

Implementing Transaction Propagation and Atomic EJB Transactions in Liberty

This initiative aims to enable support for transaction propagation and atomic EJB transactions within the Liberty runtime environment. These features are critical for applications currently relying on traditional Java EE behavior, and their absenc...

11 months ago in WebSphere Liberty 0 Future consideration

7 VOTE

On z/OS, provide an alternative to protecting an LTPA key that does not require a password.

To provide a much more secure method of implementing LTPA keys on z/OS utilizing the security applicable to Mainframe.On z/OS, provide an alternative to protecting an LTPA key that does not require a password.

2 months ago in WebSphere Liberty 0 Future consideration

22 VOTE

When using the Collectives , from the admin center screen have to ability to had ibm support and customer supported scripts used to admin the collective members.

This will bring a common place to execute scripts that will makes all the members of the collective. This will be beneficial to anyone team supporting member of a collective. IBM supplied and supported scripts would be listed . Allow a way to add ...

10 months ago in WebSphere Liberty 1 Not under consideration

1 VOTE

OAS3 feature environment should allow any single API Specification to be retrieved to the client upon request rather than a merged document

When running z/OS Connect under the OAS2 feature in a z/OS Server with multiple APIs deployed, you can issue a request to z/OS Connect to retrieve the swagger specification from the server for the specific API you request. However under the z/OS C...

21 days ago in WebSphere Liberty 1 Not under consideration

15 VOTE

Liberty servers should load just once and share the module BBGZSCFM in ECSA

If the authorized services are enabled on the Liberty z/OS server, the module BBGZSCFM must be loaded. The Liberty z/OS code doesn't have a way of determining whether or not the module has already been loaded (or unloaded) by other servers. If 100...

10 months ago in WebSphere Liberty 1 Not under consideration

4 VOTE

New configuration to disable error BadPaddingException when server starts with different keystore_password

Due to the changes in WAS Liberty 26.0.0.4 "LTPA keysPassword default value removal" and setting keystore_password, we now get error BadPaddingException on each new server startup, because the password in keystore_password differs from the default...

3 months ago in WebSphere Liberty 0 Is a defect

7 VOTE

Port the DISPLAY,ADAPTER,REGISTRATIONS and DISPLAY,ADAPTER from WAS on Z to Liberty Z

In WAS we are able to display the WOLA registrations between WAS and CICS. Looking to add the same functionality to Liberty on Z . We have automation around this command in WAS, as we move to Liberty , looking to replicate that process in Liberty.

6 months ago in WebSphere Liberty 1 Not under consideration

6 VOTE