[java-identity-provider] branch master updated: Add inbound message signing audit field. Add the signed/encrypted fields to default log.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=5e8dedc629e9979e1dd74fdbd4f479f1a302127b

The following commit(s) were added to refs/heads/master by this push:
       new  5e8dedc   Add inbound message signing audit field. Add the signed/encrypted fields to default log.
5e8dedc is described below

commit 5e8dedc629e9979e1dd74fdbd4f479f1a302127b
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Aug 15 13:15:27 2019 -0400

    Add inbound message signing audit field.
    Add the signed/encrypted fields to default log.
---
 idp-conf/src/main/resources/conf/audit.xml               |  2 +-
 idp-conf/src/main/resources/system/conf/audit-system.xml | 16 ++++++++++++++++
 .../net/shibboleth/idp/saml/profile/SAMLAuditFields.java |  3 +++
 3 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/idp-conf/src/main/resources/conf/audit.xml b/idp-conf/src/main/resources/conf/audit.xml
index 43f029d..a690ae0 100644
--- a/idp-conf/src/main/resources/conf/audit.xml
+++ b/idp-conf/src/main/resources/conf/audit.xml
@@ -15,7 +15,7 @@
     for compatibility with V2 audit logging.
     -->
     <util:map id="shibboleth.AuditFormattingMap">
-        <entry key="Shibboleth-Audit" value="%T|%b|%I|%SP|%P|%IDP|%bb|%III|%u|%ac|%attr|%n|%i|%X" />
+        <entry key="Shibboleth-Audit" value="%T|%b|%I|%SP|%P|%IDP|%bb|%III|%u|%ac|%attr|%n|%i|%XX|%X" />
     </util:map>
 
     <!-- Override the format of date/time fields in the log and/or convert to default time zone. -->
diff --git a/idp-conf/src/main/resources/system/conf/audit-system.xml b/idp-conf/src/main/resources/system/conf/audit-system.xml
index 9a84d02..44b029b 100644
--- a/idp-conf/src/main/resources/system/conf/audit-system.xml
+++ b/idp-conf/src/main/resources/system/conf/audit-system.xml
@@ -104,6 +104,22 @@
                 </entry>
                 <entry>
                     <key>
+                        <util:constant static-field="net.shibboleth.idp.saml.profile.SAMLAuditFields.SIGNING"/>
+                    </key>
+                    <bean parent="shibboleth.Functions.Compose">
+                        <constructor-arg name="g">
+                            <bean class="net.shibboleth.utilities.java.support.logic.FunctionSupport" factory-method="forPredicate">
+                                <constructor-arg>
+                                    <bean class="net.shibboleth.ext.spring.util.SpringExpressionPredicate"
+                                        c:_0="#input != null ? T(org.opensaml.saml.common.binding.SAMLBindingSupport).isMessageSigned(#input) : false" />
+                                </constructor-arg>
+                            </bean>
+                        </constructor-arg>
+                        <constructor-arg name="f" ref="shibboleth.MessageContextLookup.Inbound"/>
+                    </bean>
+                </entry>
+                <entry>
+                    <key>
                         <util:constant static-field="net.shibboleth.idp.saml.profile.SAMLAuditFields.REQUEST_ID"/>
                     </key>
                     <bean parent="shibboleth.Functions.Compose">
diff --git a/idp-saml-api/src/main/java/net/shibboleth/idp/saml/profile/SAMLAuditFields.java b/idp-saml-api/src/main/java/net/shibboleth/idp/saml/profile/SAMLAuditFields.java
index efa350a..f0a1833 100644
--- a/idp-saml-api/src/main/java/net/shibboleth/idp/saml/profile/SAMLAuditFields.java
+++ b/idp-saml-api/src/main/java/net/shibboleth/idp/saml/profile/SAMLAuditFields.java
@@ -92,6 +92,9 @@ public final class SAMLAuditFields {
     /** ForceAuthn requested field. */
     @Nonnull @NotEmpty public static final String FORCE_AUTHN = "fauth";
 
+    /** Signed inbound message field. {@since 4.0.0} */
+    @Nonnull @NotEmpty public static final String SIGNING = "XX";
+
     /** Encryption field. */
     @Nonnull @NotEmpty public static final String ENCRYPTION = "X";
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.