[java-identity-provider] branch master updated: Finish wiring of artifact consumer predicates.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=ee912a1b7716f5e7893f628f3abb87489586221c

The following commit(s) were added to refs/heads/master by this push:
       new  ee912a1   Finish wiring of artifact consumer predicates.
ee912a1 is described below

commit ee912a1b7716f5e7893f628f3abb87489586221c
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Sep 27 12:00:29 2018 -0400

    Finish wiring of artifact consumer predicates.
---
 .../system/conf/relying-party-mddriven.xml         | 24 +++++++++++-----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/idp-conf/src/main/resources/system/conf/relying-party-mddriven.xml b/idp-conf/src/main/resources/system/conf/relying-party-mddriven.xml
index c42f96b..2727a25 100644
--- a/idp-conf/src/main/resources/system/conf/relying-party-mddriven.xml
+++ b/idp-conf/src/main/resources/system/conf/relying-party-mddriven.xml
@@ -322,9 +322,7 @@
                     <bean parent="shibboleth.MDDrivenBoolMessagingProperty" p:propertyName="signArtifactRequests" />
                 </constructor-arg>
                 <constructor-arg>
-                    <value>true</value>
-                    <!-- TODO: switch default to something like this once it's available -->
-                    <!-- <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" /> -->
+                    <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" />
                 </constructor-arg>
             </bean>
         </property>
@@ -334,9 +332,11 @@
                     <bean parent="shibboleth.MDDrivenBoolMessagingProperty" p:propertyName="clientTLSArtifactRequests" />
                 </constructor-arg>
                 <constructor-arg>
-                    <value>false</value>
-                    <!-- TODO: switch default to something like this once it's available, but wrap it in NOT -->
-                    <!-- <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" /> -->
+                    <bean parent="shibboleth.Conditions.NOT">
+                        <constructor-arg>
+                            <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" />
+                        </constructor-arg>
+                    </bean>
                 </constructor-arg>
             </bean>
         </property>
@@ -432,9 +432,7 @@
                     <bean parent="shibboleth.MDDrivenBoolMessagingProperty" p:propertyName="signArtifactRequests" />
                 </constructor-arg>
                 <constructor-arg>
-                    <value>true</value>
-                    <!-- TODO: switch default to something like this once it's available -->
-                    <!-- <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" /> -->
+                    <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" />
                 </constructor-arg>
             </bean>
         </property>
@@ -444,9 +442,11 @@
                     <bean parent="shibboleth.MDDrivenBoolMessagingProperty" p:propertyName="clientTLSArtifactRequests" />
                 </constructor-arg>
                 <constructor-arg>
-                    <value>false</value>
-                    <!-- TODO: switch default to something like this once it's available, but wrap it in NOT -->
-                    <!-- <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" /> -->
+                    <bean parent="shibboleth.Conditions.NOT">
+                        <constructor-arg>
+                            <bean class="org.opensaml.messaging.logic.NoIntegrityMessageChannelPredicate" />
+                        </constructor-arg>
+                    </bean>
                 </constructor-arg>
             </bean>
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.