[Suggestion] Support JWT-SD (Selective Disclosure)

[romerod]

RabbitMQ series

4.0.x

Operating system (distribution) used

Windows

How is RabbitMQ deployed?

Windows installer

What would you like to suggest for a future version of RabbitMQ?

We are looking into JWT-SD. A part from security, also to reduce the size of the tokens.

Tokens can get pretty large, if all the rabbitmq rights are in the token.

If all the rabbitmq claims can be hashed and only disclosed to rabbitmq the token would be much smaller when used in authorization for other services.

Additionally the tokens reveal a lot of the rabbitmq topology.