[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: flows/authn/conditions/conditions-flow.xml sys...

[noreply at shibboleth.net]

Author: scantor
Date: Thu Dec 29 13:00:24 2016
New Revision: 8585

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=8585&view=rev
Log:
IDP-1101 - SubjectC14N is not being performed for expiring-password condition

https://issues.shibboleth.net/jira/browse/IDP-1101

Modified:
    trunk/idp-conf/src/main/resources/flows/authn/conditions/conditions-flow.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-flow.xml

Modified: trunk/idp-conf/src/main/resources/flows/authn/conditions/conditions-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/flows/authn/conditions/conditions-flow.xml?rev=8585&r1=8584&r2=8585&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/flows/authn/conditions/conditions-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/flows/authn/conditions/conditions-flow.xml	Thu Dec 29 13:00:24 2016
@@ -19,7 +19,7 @@
 
     <subflow-state id="CallExpiringPassword" subflow="authn/conditions/expiring-password">
         <input name="calledAsSubflow" value="true" />
-        <transition on="proceed" to="proceed" />
+        <transition on="proceed" to="ContinueSuccessfulAuthentication" />
     </subflow-state>
 
     <subflow-state id="CallExpiredPassword" subflow="authn/conditions/expired-password">

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-flow.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-flow.xml?rev=8585&r1=8584&r2=8585&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-flow.xml	(original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/password-authn-flow.xml	Thu Dec 29 13:00:24 2016
@@ -81,15 +81,21 @@
     
     <action-state id="ValidateUsernamePassword" parent="authn/conditions#ValidateUsernamePassword">
         <evaluate expression="ValidateUsernamePassword" />
-        <evaluate expression="PopulateSubjectCanonicalizationContext" />
         <evaluate expression="'proceed'" />
 
-        <transition on="proceed" to="CallSubjectCanonicalization" />
+        <transition on="proceed" to="ContinueSuccessfulAuthentication" />
         
         <!-- Fall through to a different flow if login fails on a passive or non-browser request. -->
         <transition on="#{ opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.authn.context.AuthenticationContext)).isPassive() || !opensamlProfileRequestContext.isBrowserProfile() }" to="ReselectFlow" />
 
         <!-- Other event transitions are determined by deployer in /flows/authn/conditions/conditions-flow.xml -->
+    </action-state>
+
+    <action-state id="ContinueSuccessfulAuthentication">
+        <evaluate expression="PopulateSubjectCanonicalizationContext" />
+        <evaluate expression="'proceed'" />
+        
+        <transition on="proceed" to="CallSubjectCanonicalization" />
     </action-state>
 
     <!-- This runs a c14n step on the result of the authentication. -->