[java-idp-oidc] branch main updated (b3f485a5 -> 69bc5bdb)
Henri Mikkonen
henri.mikkonen at iki.fi
Thu Oct 22 13:08:12 UTC 2020
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a change to branch main
in repository java-idp-oidc.
from b3f485a5 Remove unneeded config files/refs.
new 2eb62ef9 JOIDC-5 Initial version of the schema for OIDC RPs via SAML metadata.
new 015902b4 JOIDC-5 Initial version of the schema impl for RPs via SAML metadata.
new 7b922743 JOIDC-5 Initial versions of the node processor + related files. WIP.
new a178aed3 JOIDC-5 Initial draft of the authorize -flow supporting SAML metadata. WIP.
new 3c4e3fcd JOIDC-5 Refactoring: use SPSSODescriptor instead of custom RP type.
new 76f708f8 JOIDC-5 Initial versions of new credentials + matching keyinfo providers
new a3d9c46f JOIDC-5 Adapt to the refactored schema
new ab1f39e7 JOIDC-5 Support dynamic resolution of client ID from token requests.
new dd7d4cb1 JOIDC-5 Removes any previously set Authorization header before setting a new one.
new f5832b10 JOIDC-5 Initial version of an abstract metadata-lookup flow
new 3a49c651 JOIDC-5 Initial version, required by the metadata-lookup flow
new 714c0be5 JOIDC-5 Exploits the abstract metadata-lookup flow
new 97dd8e4f JOIDC-5 Updated testing to include RP configured via SAML-metadata
new 4cf9f746 JOIDC-5 Refactoring: got rid of OIDCSAMLPeerEntityContext.
new e19cc2a1 JOIDC-5 Added missing license header.
new d3af5eef JOIDC-5 Added ClientSecretReferenceKey element
new 609bff10 JOIDC-5 Renamed the setter method containing predicate.
new cfc81204 JOIDC-5 Initial api+impl for resolving client secrets via key.
new a0ad971e JOIDC-5 Use existing Shib class for initializing SAML peer context.
new 82a03029 JOIDC-5 Improved code and javadoc + added unit testing.
new e36bb43f JOIDC-5 Initial version for find client secret value via keys.
new b95d6b25 JOIDC-5 Initial integration of client secret value resolver.
new 2ddd5997 JOIDC-5 Removed duplicate bean definitions.
new 95f5c0cd JOIDC-5 Renamed CientSecretReferenceKey to ClientSecretKeyReference
new d315bb18 JOIDC-5 Refactoring + polishing for client secret resolution from Props.
new 43e7cc17 JOIDC-5 Initial version of a secret resolver based on Attribute Resolver.
new a98316ef JOIDC-5 Updated test dependencies.
new 0b194dbe JOIDC-5 Code and javadoc improvements.
new 71e52db3 JOIDC-5 Improved unit testing.
new 7174d839 JOIDC-5 Removed RedirectUri element from the metadata extension.
new 08500e71 JOIDC-5 Removed SubjectType from the metadata extension.
new 92b7a627 JOIDC-5 Changed the ACS binding matching the redirect_uri.
new 34acf54e JOIDC-5 Improving Javadocs.
new aa7c81f3 JOIDC-5 Removed 'Response' from XML-elements related to RequestObject.
new 0bda2dab JOIDC-5 Renamed *EncryptionResponse to *EncryptedResponse
new c260ab5f JOIDC-5 Switched the OAuthRPExtension-container to use 'choice'.
new 75ebb9e9 JOIDC-5 Added schema validation to test and updated test descriptor.
new 686da62d JOIDC-5 Allow elements and attributes from other namespaces.
new afc286b0 JOIDC-5 Moved SAML metadata extension to java-oidc-common.
new 39148c33 JOIDC-5 Adapted new package naming from java-oidc-common.
new b4dc4465 JOIDC-5 Improved dependency version management for java-oidc-common
new 9998c908 JOIDC-5 Account for test API change.
new 855331aa JOIDC-5 Fine-tuning configuration and exploit 'idp.oidc.metadata.clientSecretProperties' property.
new 69bc5bdb Cleaned out duplicate depenency declarations.
The 44 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
...esolver.java => ClientSecretValueResolver.java} | 7 +-
.../security/jwk/BasicJWKReferenceCredential.java | 70 +++
.../security/jwk/BasicNimbusSecretCredential.java | 70 +++
...Credential.java => JWKReferenceCredential.java} | 25 +-
...Credential.java => NimbusSecretCredential.java} | 27 +-
idp-oidc-extension-impl/pom.xml | 31 +-
.../oidc/filter/impl/ClientInformationParser.java | 69 +++
.../oidc/impl/MetadataNamespaceHandler.java} | 15 +-
.../ext/impl/provider/ClientSecretProvider.java | 84 +++
.../provider/ClientSecretReferenceProvider.java | 118 +++++
.../ext/impl/provider/InlineJwksProvider.java | 163 ++++++
.../ext/impl/provider/JWKSReferenceProvider.java | 92 ++++
.../oidc/config/OIDCCoreProtocolConfiguration.java | 2 +-
...on.java => ClientSecretReferenceCriterion.java} | 46 +-
.../impl/AbstractClientSecretValueResolver.java | 12 +-
.../impl/ClientInformationNodeProcessor.java | 588 +++++++++++++++++++++
.../impl/PropertiesClientSecretValueResolver.java | 124 +++++
.../ResolverServiceClientSecretValueResolver.java | 160 ++++++
.../profile/impl/PopulateOIDCMetadataContext.java | 114 ++++
.../impl/SetEntityIdToSAMLPeerEntityContext.java | 104 ++++
.../oidc-abstract-api-info-beans.xml | 7 -
.../idp/flows/oidc/authorize/authorize-beans.xml | 16 +-
.../idp/flows/oidc/authorize/authorize-flow.xml | 9 +-
.../oidc/metadata-lookup/metadata-lookup-beans.xml | 75 +++
.../oidc/metadata-lookup/metadata-lookup-flow.xml | 40 ++
.../idp/flows/oidc/token/token-beans.xml | 20 +-
.../shibboleth/idp/flows/oidc/token/token-flow.xml | 12 +-
.../idp/flows/oidc/userinfo/token-beans.xml | 20 +-
.../idp/flows/oidc/userinfo/token-flow.xml | 10 +-
.../src/main/resources/META-INF/spring.handlers | 1 +
.../src/main/resources/META-INF/spring.schemas | 3 +-
.../schema/idp-oidc-extension-metadata-ext.xsd | 22 +
.../impl/BaseClientSecretValueResolverTest.java | 74 +++
.../impl/ClientInformationNodeProcessorTest.java | 212 ++++++++
.../impl/CredentialMetadataValueResolverTest.java | 1 +
.../PropertiesClientSecretValueResolverTest.java | 112 ++++
...solverServiceClientSecretValueResolverTest.java | 283 ++++++++++
.../oidc/profile/flow/AbstractOidcFlowTest.java | 1 +
.../oidc/profile/flow/AuthorizeFlowTest.java | 18 +
.../oidc/profile/flow/TokenFlowTest.java | 14 +-
.../oidc/profile/flow/UserInfoTest.java | 17 +
.../SetEntityIdToSAMLPeerEntityContextTest.java | 126 +++++
.../src/test/resources/conf/global-oidc.xml | 20 +
.../src/test/resources/conf/global.xml | 4 +
.../src/test/resources/conf/idp-oidc.properties | 4 +-
.../src/test/resources/conf/metadata-providers.xml | 30 ++
.../impl/EntitiesDescriptor-with-oidcmd.xml | 143 +++++
.../EntityDescriptor-with-oidcmd-clientsecret.xml | 26 +
.../idpextension/oidc/metadata/impl/RdbmsData.sql | 7 +
.../idpextension/oidc/metadata/impl/RdbmsStore.sql | 5 +
.../impl/attribute-resolver-clientsecrets.xml | 53 ++
.../metadata/impl/client-secret-test.properties | 1 +
.../oidc/metadata/impl/ldapDataConnectorTest.ldif | 26 +
.../idpextension/oidc/metadata/impl/service.xml | 47 ++
pom.xml | 27 +
55 files changed, 3267 insertions(+), 140 deletions(-)
copy idp-oidc-extension-api/src/main/java/org/geant/idpextension/oidc/metadata/resolver/{MetadataValueResolver.java => ClientSecretValueResolver.java} (74%)
create mode 100644 idp-oidc-extension-api/src/main/java/org/geant/security/jwk/BasicJWKReferenceCredential.java
create mode 100644 idp-oidc-extension-api/src/main/java/org/geant/security/jwk/BasicNimbusSecretCredential.java
copy idp-oidc-extension-api/src/main/java/org/geant/security/jwk/{JWKCredential.java => JWKReferenceCredential.java} (66%)
copy idp-oidc-extension-api/src/main/java/org/geant/security/jwk/{JWKCredential.java => NimbusSecretCredential.java} (66%)
create mode 100644 idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/profile/spring/relyingparty/metadata/oidc/filter/impl/ClientInformationParser.java
copy idp-oidc-extension-impl/src/main/java/{org/geant/idpextension/oidc/attribute/resolver/spring/enc/impl/AttributeEncoderNamespaceHandler.java => net/shibboleth/idp/profile/spring/relyingparty/metadata/oidc/impl/MetadataNamespaceHandler.java} (59%)
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/keyinfo/ext/impl/provider/ClientSecretProvider.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/keyinfo/ext/impl/provider/ClientSecretReferenceProvider.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/keyinfo/ext/impl/provider/InlineJwksProvider.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/keyinfo/ext/impl/provider/JWKSReferenceProvider.java
copy idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/criterion/{ClientIDCriterion.java => ClientSecretReferenceCriterion.java} (61%)
copy idp-oidc-extension-api/src/main/java/org/geant/idpextension/oidc/profile/config/package-info.java => idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/metadata/impl/AbstractClientSecretValueResolver.java (58%)
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/metadata/impl/ClientInformationNodeProcessor.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/metadata/impl/PropertiesClientSecretValueResolver.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/metadata/impl/ResolverServiceClientSecretValueResolver.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/PopulateOIDCMetadataContext.java
create mode 100644 idp-oidc-extension-impl/src/main/java/org/geant/idpextension/oidc/profile/impl/SetEntityIdToSAMLPeerEntityContext.java
create mode 100644 idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-beans.xml
create mode 100644 idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
create mode 100644 idp-oidc-extension-impl/src/main/resources/schema/idp-oidc-extension-metadata-ext.xsd
create mode 100644 idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/metadata/impl/BaseClientSecretValueResolverTest.java
create mode 100644 idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/metadata/impl/ClientInformationNodeProcessorTest.java
create mode 100644 idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/metadata/impl/PropertiesClientSecretValueResolverTest.java
create mode 100644 idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/metadata/impl/ResolverServiceClientSecretValueResolverTest.java
create mode 100644 idp-oidc-extension-impl/src/test/java/org/geant/idpextension/oidc/profile/impl/SetEntityIdToSAMLPeerEntityContextTest.java
create mode 100644 idp-oidc-extension-impl/src/test/resources/conf/metadata-providers.xml
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/EntitiesDescriptor-with-oidcmd.xml
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/EntityDescriptor-with-oidcmd-clientsecret.xml
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/RdbmsData.sql
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/RdbmsStore.sql
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/attribute-resolver-clientsecrets.xml
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/client-secret-test.properties
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/ldapDataConnectorTest.ldif
create mode 100644 idp-oidc-extension-impl/src/test/resources/org/geant/idpextension/oidc/metadata/impl/service.xml
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list