[java-identity-provider] branch master updated: Add additional helper beans and some lazy-inits.

Scott Cantor cantor.2 at osu.edu
Tue Apr 4 19:42:22 EDT 2017


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=2c3604874f44574a9b033679cebad20338d612b8

The following commit(s) were added to refs/heads/master by this push:
       new  2c36048   Add additional helper beans and some lazy-inits.
2c36048 is described below

commit 2c3604874f44574a9b033679cebad20338d612b8
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Apr 4 19:42:28 2017 -0400

    Add additional helper beans and some lazy-inits.
---
 .../resources/system/conf/relying-party-system.xml | 34 ++++++++++++++--------
 1 file changed, 22 insertions(+), 12 deletions(-)

diff --git a/idp-conf/src/main/resources/system/conf/relying-party-system.xml b/idp-conf/src/main/resources/system/conf/relying-party-system.xml
index 26e1820..d8addd5 100644
--- a/idp-conf/src/main/resources/system/conf/relying-party-system.xml
+++ b/idp-conf/src/main/resources/system/conf/relying-party-system.xml
@@ -59,20 +59,20 @@
     a suite of metadata-driven lookup strategies pre-injected.
     -->
     
-    <bean id="Shibboleth.SSO" parent="AbstractProfileConfig"
+    <bean id="Shibboleth.SSO" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml1.profile.config.BrowserSSOProfileConfiguration"
         p:artifactConfiguration-ref="shibboleth.DefaultArtifactConfiguration"
         p:inboundInterceptorFlows="security-policy/shibboleth-sso" />
         
-    <bean id="SAML1.AttributeQuery" parent="AbstractProfileConfig"
+    <bean id="SAML1.AttributeQuery" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml1.profile.config.AttributeQueryProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml-soap" />
 
-    <bean id="SAML1.ArtifactResolution" parent="AbstractProfileConfig"
+    <bean id="SAML1.ArtifactResolution" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml1.profile.config.ArtifactResolutionProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml-soap" />
 
-    <bean id="SAML2.SSO" parent="AbstractProfileConfig"
+    <bean id="SAML2.SSO" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration"
         p:artifactConfiguration-ref="shibboleth.DefaultArtifactConfiguration"
         p:inboundInterceptorFlows="security-policy/saml2-sso"
@@ -81,40 +81,40 @@
     <util:constant id="SAML2.SSO.FEATURE_AUTHNCONTEXT"
         static-field="net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration.FEATURE_AUTHNCONTEXT"/>
 
-    <bean id="SAML2.ECP" parent="AbstractProfileConfig"
+    <bean id="SAML2.ECP" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml2.profile.config.ECPProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml2-ecp"
         p:encryptionOptionalPredicate="%{idp.encryption.optional:false}" />
 
-    <bean id="SAML2.Logout" parent="AbstractProfileConfig"
+    <bean id="SAML2.Logout" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml2.profile.config.SingleLogoutProfileConfiguration"
         p:artifactConfiguration-ref="shibboleth.DefaultArtifactConfiguration"
         p:inboundInterceptorFlows="security-policy/saml2-slo"
         p:encryptionOptionalPredicate="%{idp.encryption.optional:false}" />
 
-    <bean id="SAML2.AttributeQuery" parent="AbstractProfileConfig"
+    <bean id="SAML2.AttributeQuery" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml2.profile.config.AttributeQueryProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml-soap"
         p:encryptionOptionalPredicate="%{idp.encryption.optional:false}" />
 
-    <bean id="SAML2.ArtifactResolution" parent="AbstractProfileConfig"
+    <bean id="SAML2.ArtifactResolution" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.saml2.profile.config.ArtifactResolutionProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml-soap"
         p:encryptionOptionalPredicate="%{idp.encryption.optional:false}" />
 
-    <bean id="Liberty.SSOS" parent="AbstractProfileConfig"
+    <bean id="Liberty.SSOS" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.saml.idwsf.profile.config.SSOSProfileConfiguration"
         p:inboundInterceptorFlows="security-policy/saml2-idwsf-ssos"
         p:encryptionOptionalPredicate="%{idp.encryption.optional:false}" />
 
-    <bean id="CAS.LoginConfiguration" parent="AbstractProfileConfig"
+    <bean id="CAS.LoginConfiguration" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.cas.config.impl.LoginConfiguration" />
 
-    <bean id="CAS.ProxyConfiguration" parent="AbstractProfileConfig"
+    <bean id="CAS.ProxyConfiguration" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.cas.config.impl.ProxyConfiguration" />
 
     <!-- Ticket validity period applies to proxy-granting tickets created upon successful proxy callback validation -->
-    <bean id="CAS.ValidateConfiguration" parent="AbstractProfileConfig"
+    <bean id="CAS.ValidateConfiguration" parent="AbstractProfileConfig" lazy-init="true"
         class="net.shibboleth.idp.cas.config.impl.ValidateConfiguration"
         p:ticketValidityPeriod="PT12H" />
 
@@ -172,6 +172,16 @@
 
     </bean>
 
+    <!-- Convenience beans for directly injecting SHA-1 or SHA-256 usage.  -->
+    
+    <bean id="shibboleth.SecurityConfiguration.SHA256" parent="shibboleth.DefaultSecurityConfiguration" lazy-init="true"
+        p:signatureSigningConfiguration-ref="shibboleth.SigningConfiguration.SHA256" />
+
+    <bean id="shibboleth.SecurityConfiguration.SHA1" parent="shibboleth.DefaultSecurityConfiguration" lazy-init="true"
+        p:signatureSigningConfiguration-ref="shibboleth.SigningConfiguration.SHA1" />
+
+    <!-- Actual signing configurations for SHA-256 and SHA-1. -->
+    
     <bean id="shibboleth.SigningConfiguration.SHA256" parent="shibboleth.BasicSignatureSigningConfiguration"
             p:signingCredentials-ref="shibboleth.DefaultSigningCredential">
         <property name="signatureAlgorithms">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list