I would like to protect the REST endpoints on my Wildfly 10.1 server using JWT authorization.
My front-end (possibly backend-for-frontend later) will pass a JWT through a header to my resource server (the aforementioned Wildfly 10.1 server) where the token should be validated (either using a public key or through a token introspection end-point call).
What off-the-shelf options exist that allow a Wildfly 10.1 server to authorize requests using a JWT?
Looking at the most recent version 26 of Wildfly I find instructions to configure the MicroProfile SmallRye-jwt. https://docs.wildfly.org/26.1/Admin_Guide.html#MicroProfile_JWT_SmallRye
Since the oldest still available documentation is for Wildfly 12 but does not have a comparable microprofile documentation I doubt the above solution exists out of the box. In that case solutions like https://shiro.apache.org/ might help. Eventually take a look at this Shiro extension: https://github.com/j-martinez-dev/shiro-jwt