ADORSYS-GIS/wazuh-cert-oauth2

AI Summary: The task requires understanding the architecture of a Wazuh agent registration system that uses certificate-based authentication and OAuth2 for securing communication between the agent and the API. This involves explaining how certificate-based authentication works, how OAuth2 secures the agent-API communication, and identifying the application's place in the agent registration flow. The task includes creating an architecture diagram or notes and conducting a review session.

AI Summary: The task involves understanding and contributing to a Wazuh agent registration system secured by OAuth2. This includes exploring the application's structure, certificate management, OAuth2 token handling, CI/CD integration, security enhancements, and documentation. The work will be broken down into phases, starting with a high-level overview and progressing to detailed implementation, testing, and documentation.

AI Summary: Develop a certificate management service for Wazuh agents, integrating OAuth2 authentication (using Keycloak) for secure agent onboarding and lifecycle management. The service must issue, rotate, and revoke certificates, validate OAuth2 tokens (JWK, JWT, introspection), integrate with the Wazuh API, and include CI/CD, Slack alerting, log enrichment, and SOC audit hooks. Thorough testing is required, covering various scenarios including valid/invalid tokens, certificate expiration, and alert triggers.