[java-identity-provider] branch dev/ldaptive-v2 updated (fcf658b26 -> c5de7582d)
Daniel Fisher
dfisher at vt.edu
Sat Aug 28 02:07:15 UTC 2021
This is an automated email from the git hooks/post-receive script.
dfisher pushed a change to branch dev/ldaptive-v2
in repository java-identity-provider.
discards fcf658b26 Changes to support the ldaptive v2 API.
adds 64da01062 IDP-1710 support property replacement in XML.
adds a8a7cc24d IDP-1710 (#2) support property replacement in XML.
adds c0a2bfc6f IDP-1660 Sort multi-value attributes before hashing them in for consent
adds 42512d736 IDP-1660 Sort multi-value attributes before hashing them in for consent
adds e8c87a900 IDP-1676 Add test for LDAP failfast
adds 566803240 IDP-1725 - Review CredentialValidator bean names for consistency
adds 852aab8c2 Update test for strong encapsulation
adds 627e8ab85 IDP-1726 - Conditional DataSealer injection failing in Spring configs
adds fbfebc25c IDP-1723 - Using RelyingPartyByGroup triggers dynamic metadata lookups
adds d67210d31 IDP-1727 - Support directionality in AttributeTranscoders
adds af7f092f9 Make the advanced Duo config optional.
adds f23addaf6 IDP-1703 - More options for "direct" NameID consumption
adds 75691d84c IDP-1703 - More options for "direct" NameID consumption
adds 07935091f Fix bean definition.
adds 46cdc417f IDP-1732 - Registry service metrics were not added to configuration
adds 1c82eff0b IDP-1733 - Metric output includes nanosecs, doesn't allow TZ adjustment
adds af9743c91 Adjust status uptime output to match metric.
adds f69e8afa6 IDP-1731 - Add metric to detect connectors in failure state
adds fad5d5597 IDP-1729 - Extend attribute-sourced c14n to IdPAttributePrincipal
adds 97528d8fb IDP-1729 - Extend attribute-sourced c14n to IdPAttributePrincipal
adds 26f6dfedb Tweak property defaults.
adds e47083eca IDP-1734 - Various date formatters are using the wrong year syntax
adds ce1f13376 Add a bean template.
adds fada92adc IDP-1728 - Add support for mapping proxied Attribute into AuthnContext
adds cb768b4b5 IDP-1653 - Include ProtocolBinding in proxied SAML AuthnRequest
adds ef2f85fbe IDP-1653 - Include ProtocolBinding in proxied SAML AuthnRequest
adds 7cdb37060 IDP-1717 Handle deprecated velocity property names
adds d9a7186b1 IDP-1701 - Auditing failed requests with Subject log the wrong username
adds 3ab7b34e1 Add @since annotation to new methods.
adds a2eb98d07 Inject clock skew based on existing property.
adds 028500f7f IDP-1638 - Add hooks to customize proxied SAML request/response handling
adds 0389b31c2 IDP-1737 - Replace calls to cryptacular base64/sha2 code
adds 8b09cbb89 Replace inline hash function with delegation to flow descriptor.
adds 87c90781e IDP-1643 - Configurable activationCondition for WriteFTICKSLog
adds db67dd37b IDP-1738 do a strict overwrite when updating the bin folder.
adds 50ac7bb09 Remove redundant version macros.
adds a0b508363 IDP-1637 - Investigate possible addition of more logging facades
adds 24a16ff5c For future use.
adds e6d4db849 IDP-1716 - X509 flow within MFA and subject canonicalization
adds 4cf971c7c Options to omit certificate from public credentials.
adds 3e6243510 IDP-1716 - X509 flow within MFA and subject canonicalization
adds 56528c074 IDP-1739 Add caveat about documenting new Installer Properties
adds 080ef0dd6 IDP-1716 - X509 flow within MFA and subject canonicalization
adds 0218e22a5 Add property defaults.
adds e15b50ed2 Adjust logging to prevent complete dump of attribute objects.
adds 5209a5a4f IDP-1708 - Applying consent to queries fails with absence of consent
adds 829365606 Another logging tweak.
adds 9a89a978c Fix MSI Product description
adds 82cd523bb IDP-1741 Blunder on if the service doesn't start
adds b014a5112 Add in test view location.
adds 8a6061a8a IDP-1126 - Validation and testing features focused on new deployers
adds f80114285 Extend DataSealer customization hooks to CAS ticket sealer.
adds f8aab48b5 Revise handling of demo account feature.
adds 3ef0b8506 Add postenable message.
adds 93499458a IDP-1736 ant.sh fails if "path to/java" has a space in it
adds 9788cc887 IDP-1704 Installer needs to conditionally enable certain modules
adds 10ae2b547 Composed Matchers: The order of the children matters
adds a047de106 Remove emacs-droppings
adds 93ba4cd54 IDP-1376 Add test for duplcate names in AFP
adds 0694d33e6 IDP-1376 Warn on all duplicate filter names
adds 3d91db475 Remove duplicate super.doParse() call
adds ff520576a Remove native Spring Attribute Filter Service Tests
adds 88b8492d0 Fix Javadoc, on a test, with javadoc warbings supressed
adds 2a0808ddc IDP-1681 Comment out SAML1 endpoints in metdata generation
adds 019456c78 IDP-1376 All custom syntax parsers derive from a common base class.
adds 6446a0b89 IDP-1376 Remove the "context present" test of duplicate names.
adds 38d014951 Rebase DataSealerCLI on idp.home aware classes.
adds fbc9f0939 IDP-1743 Support use of dynamic scope in AttributeDefinition
adds a8429a437 IDP-1743 Support use of dynamic scope in AttributeDefinition
adds cfc2b6728 IDP-1607 Remove residual x86 support
adds ffa02ead9 IDP-1607 Check for CRTL on install
adds c02fee0c1 Remove some overenthusiastic editing in cfc2b672
adds 809427520 Add executable option to module resources.
adds ab96174a5 IDP-1745 Installer needs to auto-locate properties files
adds f77f074e0 IDP-1746 - Allow sms factor for non-browser ECP Duo authn
adds bbfe2b7df Token seed for testbed testing.
adds 5d7c7bbf3 Logging nits.
adds d4b05a6ed Javadoc
adds 414e29134 IDP-634 Default consent storage lifetime is "forever"
adds 334fa220b Fix tests to reflect the new reality
adds 5446312a1 IDP-1747 Local override for plugin version properties
adds 09a715fc6 Property to indirect CAS ticket sealer.
adds bf6c7f8b7 Skip null help URL.
adds c9471a693 Allow for no application key due to AuthAPI.
adds 01eda3bd8 Drop out unneeded akey field.
adds 7f51a1e47 Plugin removal should not disable modules with the clean flag.
adds fc359102c IDP-96 User approval of attribute release per entity or organization or VO
adds 36d0be223 IDP-1751 - SAML2NameID Attribute Definition not documented
adds cf614c656 IDP-1676 Extensive failFast/propagateResolution tests
adds c9ad420a6 IDP-1676 Add an AttributeDefinition to the resolver file
adds 33c432ada Update nit in log message.
adds 125459222 IDP-1676 failfastInitiailize and propagateResolutionExceptions still not working
adds efeea469d Adjust a log level.
adds acadc088c IDP-1752 - Support injection of extension schemas into SchemaBuilder
adds 628e72909 Correct @since tag.
adds 52537664d IDP-1506 - Stop SLF4JMDCServletFilter from always creating HTTP session
adds bf99ef5b3 Lock down input type.
adds a322e3c0f IDP-1686 - Looping detection
adds 4d223aae8 IDP-1686 - Looping detection
adds 313aad210 Add beans for new scripted function/predicate variants.
adds 5aa860a17 JSPT-109 - Add scripted variants of additional functional interfaces
adds 9055bab05 IDP-1759 - AuthenticatingAuthority elements created in the wrong order
adds 350f4826f JSPT-109 - Add scripted variants of additional functional interfaces
adds c26f60315 IDP-1760 - Improve logging on redundant connectors
adds ef6768270 Needs to call superclass to add default variables into context.
adds 45c746938 IDP-1760 - Improve logging on redundant connectors
adds 4f5d77741 Add c'tor argument annotation.
adds 809fce3bc Parent config beans and other wiring related to encryption via key agreement
adds 8acb379c7 IDP-1761 - Resolve dependency on insecure version of JSTL artifact
adds e016fd113 Add missing @Nullable annotations on methods of SecurityConfiguration.
adds 8ae8f3fa6 IDP-1764: SecurityConfiguration -LookupFunctions not doing null check...
adds 48e48aa4c IDP-1764: SecurityConfiguration -LookupFunctions not doing null check...
adds 6e5601320 IDP-1762 Failure attempting plugin upgrade
adds 812b4f0da Nit in comment.
adds 57845f34a IDP-1766 - upgrade issues due to removal of session type map
adds 8c020f0bb Fix map/list oversight.
adds 346b6acce IDP-1767 - Missing username/password doesn't trigger classified error
adds 95be1ccfe Fix unit test.
adds facdbb3fc Account for symlinks in module resource paths.
adds 01d7cc0ca Some logging cleanup.
adds 3590c68c2 Add plugin version to some error msgs.
adds 9b0b5e5f1 Javadoc and warning fixes.
adds 145142919 IDP-1770 Installer is disabling modules during plugin upgrade
adds bba75dfc2 IDP-1771 Plugin Installer is not obeying getEnableOnInstall()
adds 7a4e3c0dd IDP-1769 Installer locks down plugin contents files and strips write access
adds 6251caeb8 Fix Build
adds e205997fd Add deprecation warning to first run of Duo flow.
adds 3ac52cd67 Add detection of unknown module IDs.
adds af409f33c IDP-1769 Installer locks down plugin contents files and strips write access
adds 6bc4dccf7 Stop enabling consent by default given no viable deployment model.
adds 1a027575f Move LDAP resolver example to new examples folder.
adds 6001d29bc IDP-1748 - Allow SubjectConfirmationData Address to be disabled
adds 1a9ad8bd2 IDP-1774 - Clean module removal should remove .idpnew files
adds 9dca16114 IDP-1706: Enhance StaticPKIXFactoryBean to support PKIXTrustEvaluator...
adds c7971a571 IDP-1774 - Uninstalling module should remove .idpnew files
adds 6f7232fb7 Adjust warning on missing property files.
adds b23118331 Add a field designation for RelayState.
adds 52f035ee7 IDP-1775 - Add audit extraction of RelayState
adds 498a1b3f1 Fix typo in log message
adds 6e832ac9c IDP-1776 - Installer failure on missing "additional" property files
adds 177afa9a5 Style tweak
adds 26aab0013 Lock parent version for new release
adds c43633ab8 Update files to be tagged for release
adds fce09d4a0 Bump version after release
adds 28bccab21 Fix Tests
adds 0faf20ec3 IDP-1779 - Deprecated property left behind
adds 47d9a6070 IDP-1780 Add jetty.http.compliance=RFC7230_NO_AMBIGUOUS_URIS
adds 4afe31c2d Rev WiX files in prepartion for notional 4.1.1
adds c624a202d IDP-1781 Remove support for V2.0 windows upgrade
adds 00eec0f30 IDP-1783 - Root URL for modules' help is wrong
adds bc6654d22 IDP-1784 --updateURLS only partially works for plugin installer
adds 0b0597969 IDP-1785 - Move idp-parent managed deps into java-parent-project
adds 21e0ac6b6 IDP-1785 - Move idp-parent managed deps into java-parent-project
adds e2ac3b337 IDP-1785 - Move idp-parent managed deps into java-parent-project
adds 40c96fd48 IDP-1786 - Upgrade jQuery to 3.6.0
adds c059e2c9e IDP-1788 - Problem with x509 Authentication in IDP 4.1.0
adds 58aed4b45 Add a German DisplayName to make testing easier.
adds 901405ff1 Add a locale interceptor into the test tree.
adds 3696652e8 IDP-1792 - NPE when filter rule permitAny isn't a boolean
adds 83e19f6ac Missed a return statement.
adds 58ffc62cf IDP-1597 Change of language incomplete when switching locale
adds 07d5bc441 IDP-1597 Change of language incomplete when switching locale
adds b657b525b IDP-1794 - Memory metrics missing max heap gauge
adds 78da41cf3 IDP-1795 Complete the removal of Collections from IdPAttributes
adds bf3f7d07f Revert "IDP-1795 Complete the removal of Collections from IdPAttributes"
adds 26d1f06bf IDP-1795 Complete the removal of Collections from IdPAttributes (again)
adds 086b9684e IDP-1796 - Selection of c14n flow doesn't log enough information
adds 6c26030a7 Add a test for equality override.
adds f4003c656 Fix comment in messages file.
adds ca14ef178 Improve logging on loop detection.
adds b53b8c843 IDP-1799 - X.509 certificate access should check jakarta attribute
adds 68cc64e54 Fix comment at top of file.
adds e5c57094b IDP-1801 - NPEs on invalid enum values in LDAP factory bean
adds 0d05ca0da IDP-1801 - NPEs on invalid enum values in LDAP factory bean
adds fc93526e0 IDP-1803 - Construction of Scoping in AuthnRequests is broken
adds 3bc23709d Clean up deprecation warnings and annotations.
adds c3f5813a3 IDP-1802 - Empty default for idp.persistentId.retryableErrors
adds 740ba8d0b Accidental deprecation/warning on setBrowserLanguageRanges method.
adds a317dca35 Remove dead resource
adds c918cc8bf IDP-1624 Preventing exporting DataConnectors from running during c14n
adds 1452b36c9 IDP-1624 IDP-1804 Fix parser to reflect changed factory method.
adds d23f1d55b Add S3 CNAME as backup metadata location for first-party plugins.
adds 21ebec680 Lower default session timeout a bit.
adds 9d310b03d Tweak log message.
adds b6800e8cf IDP-1812 - Make consent attribute logging less noisy
adds f963a33ce idp.authn.Duo.addDefaultPrincipals property not honored by DuoWeb bean
adds 8b2636d61 Lock parent version for new release
adds 1142abf1c Update files to be tagged for release
adds 161961e7b Bump version after release
adds 99d1715ac Update files to be tagged for release
adds 367c8c718 Bump version after release
adds 1becabae5 Speculatively move windows installers to 4.1.3
adds 5c90327f6 Move IdP main branch to 4.2.0-SNAPSHOT.
adds 4df6057a6 Missed the subordinate POMs due to maven glitch.
adds e1e9dc0ce IDP-1827 - Option to hide logout reporting
adds 2e7694ae2 IDP-1825 - Extend SAML2 Session storage with knowledge of logout support
adds 88652f33c IDP-1296 - Non-standard extension to discriminate logout endpoints
adds aee6246bf IDP-1699 Warn if updating an IdP with an unsupported plugin
adds a11811e3c IDP-1772 Plugin installation should output module operations
adds 919c988d3 IDP-1789 Add option to SimpleAttributeDefinition to drop null or empty values
adds a74e8bbb8 IDP-1789 Add option to SimpleAttributeDefinition to drop null or empty values
adds f8dde3e0f IDP-1795 Add deprecation warning for non lists passed to an IdPAttribute
adds 5d6be3934 IDP-1808 Option in plugin.sh to postpone rebuilding the .war file
adds 3c1233d23 IDP-1814 Align Installer logging with the command line logging
adds 898129e95 IDP-1811, IDP-1817 Push Attribute Information collection down.
adds df46ae9c6 IDP-1811 Expose suppressDisplayInformation as a resolver plugin option
adds a0f0ddbb4 IDP-1817 Deprecate old Display methods in IdPAttribute
adds e0fbf4efa IDP-1811 Expose suppressDisplayInformation as a resolver plugin option 1/3
adds d06a3e5c5 IDP-1811 Expose suppressDisplayInformation as a resolver plugin option 2/3
adds 118d66ff3 IDP-1811 Expose suppressDisplayInformation as a resolver plugin option 3/3
adds a45e2c708 IDP-1813 Investigate changing output mechanisms for installers
adds 6b523cc4a Support multiple client IP ranges for Sauce Labs browser tests
adds b8ef4acab Update OpenSAML version.
adds 2b3ebbad4 IDP-1296 - Non-standard extension to discriminate logout endpoints
adds aac60b278 IDP-1829 - Add option to disable outbound logout
adds 715c1b6d1 IDP-1757 Add a comment about the metadatagen plugin.
adds 5dfb60fcc IDP-1824 - Conditionalize NameID encryption on format
adds 0a42022b2 IDP-1816 - Abstract away session cache dependency on IP address
adds 36fe23d20 Add unit tests for IDP-1816.
adds 2e352de94 IDP-1742 - Improve deprecation warnings for LDAP properties
adds 0686bb3ed JPAR-179 - Anomalies in our POMs
adds 24db229f6 JPAR-175 Initial pass at dependency analysis test.
adds bcecb902e JPAR-175 Fix order of Maven home location
adds 3c90e2ff1 JPAR-175 Add back trace from WAR content to provoking artifact in pom.
adds 2dd747530 JPAR-175 Add a source pom filename to each artifact for later reporting
adds 648adc4ba JPAR-175 More tidy
adds 4fb21b801 JPAR-175 more tinkering
adds a8ecd2348 JPAR-176 Change the how managed dependencies are inherited.
adds 5f90eafe6 Unlock parent POM.
adds 881ed4ef8 Clarify command about dependencies.
adds 87c068486 JPAR-179 - Anomalies in our POMs
adds b80142c8c Supress WAR analysis test for now
adds 61d624381 Fix build
adds e9da5fa3b IDP-1831 - Uncaught Exception while proxying to Azure
adds 8a2f72ede IDP-1758 - Allow suppression of AuthenticatingAuthority elements
adds 302d01b03 Fix misspelled property.
adds 1f4e6b9a6 Correct misnamed setter.
adds 6b90b71ff JPAR-176 Parse the child modules in idp-parent
adds 77b033ada Supress test. The multi builds don't run it
adds 99a429919 Fix "test only" build.
adds 2baaa3d54 JPAR-180 - Update projects to use SCP site deployment
adds 0abf005b6 Stop masking event when logout is disabled for an SP.
adds 330df1fe3 JPAR-175 Add Signature checking to the dependency analysis
adds a4ce8da10 Unlock spring-extensions version.
adds aa2379d6e JPAR-182 Check our WAR contents for consistency
adds d732b2f9f JPAR-182 Check our WAR contents for consistency
adds 2bad5bbdf IDP-1833 - Wildcard classpath breaks inside flow imports on Windows
adds 1345eafde Typo in log message
adds 968ccadfc IDP-1835 Better logging from IdPUIInfo for empty strings
adds b2b7f68b9 JPAR-175 Investigate Maven Dependency Resolution Strategy
adds 58e57a091 JPAR-175 Investigate Maven Dependency Resolution Strategy
adds 3a4a80f44 Test needs spring-jdbc (was coming from OpenSAML by mistake).
adds 3a4ce4938 IDP-1838 Plugin installer ignores custom HttpClient (e.g. HTTP Proxy)
adds 3d1d301eb OSJ-337 - The storage-impl POM has compile-time Spring deps
adds 5cf899b67 Move to released Spring version.
adds 08e3f957b JPAR-182 Check our WAR contents for consistency
adds 37ca5a170 OSJ-337 - The storage-impl POM has compile-time Spring deps
adds 820376046 IDP-1840 - Add a test for the FlowRelativeResourceLoader to detect IDP-1833
adds 5f37f196d IDP-1844 - Add idp-conf flow loading integration test to detect IDP-1833
adds 0f374b107 Tighten up maven auto-sensing
adds a39f6908d JPAR-182 Signature checking on WAR contents
adds 2930b2c9a JPAR-182 Signature checking on WAR contents
adds f63c0c2af IDP-1850 - Status page is misreporting uptime
adds 248345cba IDP-1852 - Disable failing test
adds 46f4329f2 IDP-1853 Remove Javascript dependencies from the IdP distribution
adds 3d9c7a21b Extra logging in the uninstall-during-update path
adds cd556ae5c JSCRIPTING-9 JSCRIPTING-12 Start using jdk nashorn for tests
adds e1d158a61 IDP-1848 Expose any missing settings for LDAP pooling
adds 3f3929f48 IDP-1848 Expose any missing settings for LDAP pooling
adds 12c6857d9 IDP-1848 Expose any missing settings for LDAP pooling
adds c3a91cb48 IDP-1830 Installer should check for outdated web.xml content
adds efb5c7b6d IDP-1830 - Installer should check for outdated web.xml content
adds 6f806278d IDP-1854 Add a discovery option to the plugin command
adds bcf8f26c6 Fix a couple if installer usabilities nits
new c5de7582d Changes to support the ldaptive v2 API.
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (fcf658b26)
\
N -- N -- N refs/heads/dev/ldaptive-v2 (c5de7582d)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omits" are not gone; other references still
refer to them. Any revisions marked "discards" are gone forever.
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
Summary of changes:
idp-admin-api/pom.xml | 4 +-
.../shibboleth/idp/module/AbstractIdPModule.java | 30 +-
.../java/net/shibboleth/idp/module/IdPModule.java | 7 +
.../idp/module/PropertyDrivenIdPModule.java | 13 +-
.../shibboleth/idp/plugin/AbstractIdPPlugin.java | 8 +-
.../java/net/shibboleth/idp/plugin/IdPPlugin.java | 10 +-
.../idp/plugin/PropertyDrivenIdPPlugin.java | 17 +-
.../net/shibboleth/idp/module/module.properties | 1 +
idp-admin-impl/pom.xml | 4 +-
...InitializeAdministrativeProfileContextTree.java | 16 +-
.../shibboleth/idp/admin/impl/OutputMetrics.java | 60 +-
.../idp/module/impl/ModuleManagerArguments.java | 16 +-
.../idp/module/impl/ModuleManagerCLI.java | 35 +-
.../idp/module/impl/PluginIdPModule.java | 2 +-
.../idp/plugin/impl/FirstPartyIdPPlugin.java | 11 +-
idp-attribute-api/pom.xml | 4 +-
.../net/shibboleth/idp/attribute/IdPAttribute.java | 18 +-
.../transcoding/AttributeTranscoderRegistry.java | 8 +-
idp-attribute-filter-api/pom.xml | 4 +-
idp-attribute-filter-impl/pom.xml | 27 +-
.../attribute/filter/impl/AttributeFilterImpl.java | 2 +-
.../logic/impl/AbstractComposedMatcher.java | 3 +-
.../logic/impl/AbstractComposedPolicyRule.java | 3 +-
.../impl/AbstractEntityAttributePolicyRule.java | 4 +-
.../saml/impl/AbstractEntityGroupPolicyRule.java | 9 +-
.../matcher/impl/MockValuePredicateMatcher.java | 1 -
.../filter/matcher/impl/ScriptedMatcherTest.java | 5 +-
.../logic/impl/AbstractComposedMatcherTest.java | 3 +-
.../filter/matcher/logic/impl/AndMatcherTest.java | 4 +-
.../filter/matcher/logic/impl/OrMatcherTest.java | 4 +-
.../impl/MappedAttributeInMetadataMatcherTest.java | 6 +-
.../impl/NumOfAttributeValuesPolicyRuleTest.java | 4 +-
.../logic/impl/AbstractComposedPolicyRuleTest.java | 3 +-
.../policyrule/logic/impl/AndPolicyRuleTest.java | 4 +-
.../policyrule/logic/impl/OrPolicyRuleTest.java | 4 +-
idp-attribute-filter-spring/pom.xml | 27 +-
.../attribute/filter/spring/BaseFilterParser.java | 80 ++-
.../filter/spring/basic/impl/AndMatcherParser.java | 5 +-
.../filter/spring/basic/impl/NotMatcherParser.java | 2 +-
.../filter/spring/basic/impl/OrMatcherParser.java | 5 +-
.../spring/basic/impl/ScriptedMatcherParser.java | 2 +-
.../impl/AttributeFilterPolicyGroupParser.java | 10 +-
.../spring/impl/AttributeFilterPolicyParser.java | 4 +-
.../filter/spring/impl/AttributeRuleParser.java | 22 +-
.../matcher/BaseAttributeValueMatcherParser.java | 2 +-
.../spring/policyrule/BasePolicyRuleParser.java | 2 +-
.../filter/spring/AttributeFilterServiceTest.java | 48 +-
.../idp/attribute/filter/spring/basic/AndTest.java | 9 +
.../attribute/filter/matcher/#scripted-rhino.xml# | 17 -
.../idp/attribute/filter/matcher/andMulti.xml | 22 +
.../idp/attribute/filter/spring/deny1.xml | 4 +-
.../idp/attribute/filter/spring/native/deny1.xml | 62 --
.../idp/attribute/filter/spring/native/deny2.xml | 69 --
.../idp/attribute/filter/spring/native/policy2.xml | 61 --
.../idp/attribute/filter/spring/native/policy3.xml | 35 -
.../idp/attribute/filter/spring/native/policy4.xml | 65 --
.../idp/attribute/filter/spring/native/policy5.xml | 72 --
idp-attribute-impl/pom.xml | 4 +-
.../impl/AttributeTranscoderRegistryImpl.java | 44 +-
.../impl/AttributeTranscoderRegistryImplTest.java | 12 +-
idp-attribute-resolver-api/pom.xml | 4 +-
.../resolver/AbstractAttributeDefinition.java | 1 +
.../attribute/resolver/AbstractDataConnector.java | 59 +-
.../attribute/resolver/AbstractResolverPlugin.java | 13 +-
.../idp/attribute/resolver/DataConnector.java | 13 +
.../resolver/logic/ResolutionLabelPredicate.java | 21 +-
idp-attribute-resolver-impl/pom.xml | 27 +-
.../ad/impl/DecryptedAttributeDefinition.java | 18 +-
.../ad/impl/ScopedAttributeDefinition.java | 115 +++-
.../resolver/ad/impl/ScriptedIdPAttributeImpl.java | 2 +-
.../ad/impl/SimpleAttributeDefinition.java | 34 +-
.../resolver/dc/ldap/impl/LDAPDataConnector.java | 7 +-
.../storage/impl/SimpleStorageMappingStrategy.java | 2 +-
.../resolver/impl/AttributeResolverImpl.java | 63 +-
.../impl/AttributeResolverServiceGaugeSet.java | 44 +-
.../resolver/ad/impl/ScopedAttributeTest.java | 54 +-
.../resolver/ad/impl/SimpleAttributeTest.java | 43 ++
.../resolver/ad/impl/TemplateAttributeTest.java | 7 +-
.../dc/ldap/impl/LDAPDataConnectorTest.java | 7 +-
idp-attribute-resolver-spring/pom.xml | 25 +-
.../spring/BaseResolverPluginDependencyParser.java | 4 +-
.../resolver/spring/BaseResolverPluginParser.java | 19 +-
...ML1NameIdentifierAttributeDefinitionParser.java | 8 +-
.../impl/SAML2NameIDAttributeDefinitionParser.java | 6 +
.../ad/impl/ScopedAttributeDefinitionParser.java | 12 +-
.../ad/impl/SimpleAttributeDefinitionParser.java | 8 +-
.../spring/ad/mapped/impl/SourceValueParser.java | 4 +-
.../spring/ad/mapped/impl/ValueMapParser.java | 4 +-
.../spring/dc/AbstractDataConnectorParser.java | 1 -
.../resolver/spring/dc/impl/CacheConfigParser.java | 4 +-
.../spring/dc/impl/DataConnectorFactoryBean.java | 1 +
.../dc/ldap/impl/LDAPDataConnectorParser.java | 40 +-
.../spring/enc/BaseAttributeEncoderParser.java | 24 +-
.../impl/AttributeResolverServiceStrategy.java | 41 +-
.../resolver/spring/AttributeResolverTest.java | 6 +-
.../idp/attribute/resolver/spring/IdP1676Test.java | 222 +++++++
.../ad/ScopedAttributeDefinitionParserTest.java | 29 +-
.../spring/ad/SimpleAttributeParserTest.java | 6 +-
.../resolver/failfast/attributeResolverBeans.xml | 6 +-
.../failfast/attributeResolverBeansDefaultFF.xml | 6 +-
.../idp/attribute/resolver/filter/service.xml | 6 +-
.../resolver/spring/ad/resolver/scopedBoth.xml | 7 +
.../resolver/spring/ad/resolver/scopedSource.xml | 7 +
.../ad/resolver/simpleAttributePopulated2.xml | 1 +
.../resolver/spring/attribute-resolver.xml | 3 +-
.../resolver/spring/dc/http/spring-beans.xml | 6 +-
.../resolver/spring/dc/ldap/ldap-v2.properties | 2 +
.../resolver/ldap-attribute-resolver-v2-props.xml | 2 +
.../resolver/spring/dc/storage/spring-beans.xml | 6 +-
.../attribute/resolver/spring/externalBeans.xml | 6 +-
.../resolver/spring/idp-1676-resolver.xml | 53 ++
.../spring/{service.xml => idp-1676-service.xml} | 9 +-
.../resolver/spring/mappedTemplateService.xml | 6 +-
.../idp/attribute/resolver/spring/mapperTest.xml | 6 +-
.../attribute/resolver/spring/multiFileService.xml | 14 +-
.../idp/attribute/resolver/spring/service.xml | 6 +-
.../idp/attribute/resolver/spring/service2.xml | 14 +-
.../attribute/resolver/spring/serviceNullStrip.xml | 6 +-
.../idp/attribute/resolver/spring/velocity2.xml | 6 +-
idp-authn-api/pom.xml | 5 +-
...bstractUsernamePasswordCredentialValidator.java | 8 +-
.../idp/authn/AbstractValidationAction.java | 7 +
.../idp/authn/AuthenticationFlowDescriptor.java | 33 +-
.../config/LDAPAuthenticationFactoryBean.java | 12 +
.../idp/authn/context/AuthenticationContext.java | 39 +-
.../idp/authn/duo/BasicDuoIntegration.java | 10 +-
.../shibboleth/idp/authn/duo/DuoIntegration.java | 3 +-
.../idp/authn/principal/HOTPPrincipal.java | 92 +++
.../authn/principal/PrincipalServiceManager.java | 4 +-
.../idp/authn/principal/UsernamePrincipalTest.java | 14 +
idp-authn-impl/pom.xml | 5 +-
.../shibboleth/idp/authn/duo/impl/DuoSupport.java | 5 +
.../impl/ExtractDuoAuthenticationFromHeaders.java | 4 -
.../AttributeSourcedSubjectCanonicalization.java | 116 +++-
.../DefaultAuthenticationResultSerializer.java | 47 +-
.../impl/ExtractX509CertificateFromRequest.java | 18 +-
.../idp/authn/impl/FinalizeAuthentication.java | 21 +-
.../impl/InitializeRequestedPrincipalContext.java | 2 +-
.../impl/SelectSubjectCanonicalizationFlow.java | 6 +-
.../authn/impl/SimpleSubjectCanonicalization.java | 29 +-
.../idp/authn/impl/ValidateX509Certificate.java | 25 +-
.../authn/impl/X500SubjectCanonicalization.java | 5 +-
.../shibboleth/idp/authn/impl/X509AuthServlet.java | 50 +-
.../shibboleth/idp/authn/impl/X509ProxyFilter.java | 7 +-
.../principal/impl/X500PrincipalSerializer.java | 147 +++++
...ttributeSourcedSubjectCanonicalizationTest.java | 102 ++-
.../DefaultAuthenticationResultSerializerTest.java | 27 +-
.../ExtractX509CertificateFromRequestTest.java | 21 +-
.../idp/authn/impl/FinalizeAuthenticationTest.java | 15 +-
.../idp/authn/impl/ValidateCredentialsTest.java | 8 +-
.../impl/X500PrincipalSerializerTest.java | 49 +-
idp-bom/pom.xml | 4 +-
idp-cas-api/pom.xml | 4 +-
idp-cas-impl/pom.xml | 4 +-
.../cas/proxy/impl/HttpClientProxyValidator.java | 11 +-
.../idp/cas/session/impl/CASSPSession.java | 7 +
.../src/test/resources/spring/test-flow-beans.xml | 13 +-
idp-conf-impl/pom.xml | 4 +-
.../net/shibboleth/idp/module/authn/impl/Demo.java | 41 +-
.../services/net.shibboleth.idp.module.IdPModule | 1 +
.../net/shibboleth/idp/conf/admin-system.xml | 5 +
.../net/shibboleth/idp/conf/audit-system.xml | 29 +-
.../net/shibboleth/idp/conf/authn-system.xml | 47 +-
.../shibboleth/idp/conf/cas-protocol-system.xml | 5 +-
.../net/shibboleth/idp/conf/conditions.xml | 6 +
.../net/shibboleth/idp/conf/functions.xml | 25 +-
.../net/shibboleth/idp/conf/global-system.xml | 17 +-
.../net/shibboleth/idp/conf/mvc-beans.xml | 3 +-
.../idp/conf/profile-intercept-system.xml | 4 +-
.../shibboleth/idp/conf/relying-party-mddriven.xml | 18 +
.../shibboleth/idp/conf/relying-party-system.xml | 23 +-
.../net/shibboleth/idp/conf/saml-nameid-system.xml | 2 +-
.../resources/net/shibboleth/idp/conf/sealer.xml | 2 +-
.../net/shibboleth/idp/conf/security-system.xml | 3 +-
.../net/shibboleth/idp/conf/services-system.xml | 1 +
.../shibboleth/idp/conf/session-manager-system.xml | 8 +
.../shibboleth/idp/flows/admin/metrics-beans.xml | 3 +-
.../idp/flows/authn/authn-abstract-flow.xml | 2 +
.../net/shibboleth/idp/flows/authn/authn-beans.xml | 3 +-
.../shibboleth/idp/flows/authn/duo-authn-beans.xml | 3 +-
.../shibboleth/idp/flows/authn/duo-authn-flow.xml | 3 +
.../idp/flows/authn/password-authn-beans.xml | 11 +-
.../idp/flows/authn/saml-authn-beans.xml | 10 +-
.../shibboleth/idp/flows/authn/saml-authn-flow.xml | 2 +-
.../idp/flows/authn/x509-authn-beans.xml | 2 +-
.../idp/flows/authn/x509-internal-authn-beans.xml | 1 +
.../c14n/attribute-sourced-subject-c14n-beans.xml | 2 +
.../flows/c14n/subject-c14n-saml-default-beans.xml | 42 +-
.../flows/intercept/attribute-release-beans.xml | 2 +-
.../idp/flows/intercept/attribute-release-flow.xml | 4 +-
.../intercept/attribute-release-query-flow.xml | 12 +-
.../shibboleth/idp/flows/logout/logout-beans.xml | 3 +-
.../idp/flows/logout/logout-propagation-beans.xml | 2 +-
.../flows/saml/logout/saml2-logoutprop-beans.xml | 15 +
.../flows/saml/logout/saml2-logoutprop-flow.xml | 4 +-
.../idp/flows/saml/saml-abstract-beans.xml | 2 +-
.../idp/flows/saml/saml2/common-beans.xml | 8 +-
.../flows/saml/saml2/slo-front-abstract-beans.xml | 4 +
.../flows/saml/saml2/slo-front-abstract-flow.xml | 20 +-
.../idp/flows/saml/saml2/sso-abstract-beans.xml | 3 +-
.../shibboleth/idp/messages/messages.properties | 2 +
.../idp/module/authn/impl/module.properties | 9 +
.../module/conf/authn/password-authn-config.xml | 11 +-
.../idp/module/credentials/demo.htpasswd | 1 +
.../net/shibboleth/idp/views/logout/propagate.vm | 7 +-
idp-conf/pom.xml | 35 +-
idp-conf/src/main/resources/conf/admin/metrics.xml | 2 +
.../src/main/resources/conf/attribute-resolver.xml | 21 +-
idp-conf/src/main/resources/conf/audit.xml | 2 +-
.../src/main/resources/conf/authn/authn.properties | 1 +
.../resources/conf/c14n/subject-c14n.properties | 11 +
.../{ => examples}/attribute-resolver-ldap.xml | 2 +
idp-conf/src/main/resources/conf/idp.properties | 24 +-
idp-conf/src/main/resources/conf/ldap.properties | 4 +-
idp-conf/src/main/resources/conf/relying-party.xml | 9 +-
.../src/main/resources/conf/saml-nameid.properties | 4 +-
.../src/main/resources/conf/services.properties | 1 +
.../main/resources/messages/messages.properties | 2 +-
.../src/main/resources/views/logout-propagate.vm | 5 +
.../idp/test/flows/load/FlowLoadsFlowTest.java | 61 ++
.../idp/test/flows/load/LoadThisBean.java | 46 +-
.../flows/saml2/SAML2TestResponseValidator.java | 13 +-
idp-conf/src/test/resources/conf/global.xml | 29 +
idp-conf/src/test/resources/conf/idp.properties | 18 +-
.../src/test/resources/conf/mvc-beans.xml | 21 +-
.../src/test/resources/credentials/demo.htpasswd | 1 +
.../flow-load-test/flows/import-beans.xml | 18 +
.../flow-load-test/flows/test-flow-loads-beans.xml | 21 +
.../flow-load-test/flows/test-flow-loads-flow.xml | 18 +
.../flow-load-test/test-webflow-config.xml | 27 +
.../test/resources/metadata/example-metadata.xml | 38 +-
idp-consent-api/pom.xml | 4 +-
idp-consent-impl/pom.xml | 4 +-
.../ar/impl/PopulateAttributeReleaseContext.java | 4 +-
.../consent/flow/ar/impl/ReleaseAttributes.java | 15 +-
.../consent/flow/impl/ConsentFlowDescriptor.java | 17 +-
.../storage/impl/CreateGlobalConsentResult.java | 9 +-
.../consent/flow/storage/impl/CreateResult.java | 10 +-
.../impl/AbstractAttributeDisplayFunction.java | 53 +-
.../impl/AttributeDisplayDescriptionFunction.java | 25 +-
.../logic/impl/AttributeDisplayNameFunction.java | 26 +-
.../impl/AttributeReleaseConsentFunction.java | 39 +-
.../logic/impl/AttributeValuesHashFunction.java | 15 +-
.../logic/impl/MessageSourceConsentFunction.java | 33 +-
.../flow/impl/ConsentFlowDescriptorTest.java | 5 +-
.../impl/AbstractConsentStorageActionTest.java | 1 +
.../flow/storage/impl/CreateResultTest.java | 16 +-
.../idp/consent/impl/ConsentTestingSupport.java | 36 +-
...ttributeDisplayNameDescriptionFunctionTest.java | 125 +++-
.../impl/AttributeReleaseConsentFunctionTest.java | 65 +-
.../impl/AttributeValueLookupFunctionTest.java | 2 +-
.../impl/AttributeValuesHashFunctionTest.java | 4 +-
.../impl/MessageSourceConsentFunctionTest.java | 22 +-
.../storage/impl/ConsentSerializerTest.java | 6 +-
idp-core/pom.xml | 4 +-
.../shibboleth/idp/cli/DataSealerArguments.java | 7 +-
.../java/net/shibboleth/idp/cli/DataSealerCLI.java | 5 +-
.../shibboleth/idp/log/SLF4JMDCServletFilter.java | 12 +-
.../shibboleth/idp/metrics/impl/CoreGaugeSet.java | 16 +
.../shibboleth/idp/metrics/impl/HTTPReporter.java | 2 +-
...IdPPropertiesApplicationContextInitializer.java | 125 ++--
idp-distribution/pom.xml | 6 +-
idp-distribution/src/main/resources/bin/ant.sh | 2 +-
.../src/main/resources/bin/install-log.xml | 2 +-
idp-distribution/src/main/resources/bin/plugin.sh | 2 +
idp-installer/pom.xml | 10 +-
.../net/shibboleth/idp/installer/BuildWar.java | 4 +-
.../shibboleth/idp/installer/CopyDistribution.java | 23 +-
.../idp/installer/CurrentInstallState.java | 7 +
.../idp/installer/InstallerProperties.java | 10 +
.../idp/installer/InstallerPropertiesImpl.java | 40 +-
.../shibboleth/idp/installer/InstallerSupport.java | 17 +-
.../installer/ProgressReportingOutputStream.java | 12 +
.../net/shibboleth/idp/installer/V4Install.java | 77 ++-
.../installer/impl/CurrentInstallStateImpl.java | 80 ++-
.../idp/installer/impl/InstallationLogger.java | 486 ++++++++++++++
.../shibboleth/idp/installer/impl/Installer.java | 3 +-
.../metadata/impl/MetadataGeneratorImpl.java | 108 ++-
.../idp/installer/plugin/impl/PluginInfo.java | 248 +++++++
.../idp/installer/plugin/impl/PluginInstaller.java | 187 ++++--
.../plugin/impl/PluginInstallerArguments.java | 51 +-
.../installer/plugin/impl/PluginInstallerCLI.java | 50 +-
.../plugin/impl/PluginInstallerSupport.java | 4 +-
.../idp/installer/plugin/impl/PluginState.java | 230 ++-----
.../plugin/impl/RollbackPluginInstall.java | 32 +-
.../idp/installer/plugin/impl/TrustStore.java | 16 +-
idp-installer/src/main/wix/IdP.bat | 2 +-
idp-installer/src/main/wix/Jetty.bat | 2 +-
idp-installer/src/main/wix/MergeModule.wxs | 4 +-
idp-installer/src/main/wix/ShibbolethIdP-main.wxs | 37 +-
.../src/main/wix/ShibbolethIdP-registry.wxs | 8 +-
idp-installer/src/main/wix/procrun.wxs | 7 +-
.../idp/dependencies/DependencyTest.java | 725 +++++++++++++++++++++
.../shibboleth/idp/dependencies/GPGKeyRing.java | 257 ++++++++
.../net/shibboleth/idp/dependencies/ParsedPom.java | 517 +++++++++++++++
.../net/shibboleth/idp/dependencies/PomLoader.java | 26 +-
.../java/net/shibboleth/idp/installer/Test.java | 6 +-
.../idp/installer/plugin/impl/PluginCLITest.java | 15 +-
.../idp/installer/plugin/impl/PluginStateTest.java | 8 +-
.../idp/installer/plugin/impl/RollbackTester.java | 5 +-
.../src/test/resources/credentials/truststore.asc | 289 ++++++++
.../shibboleth/idp/dependencies/stores/antlr.gpg | Bin 0 -> 4552 bytes
.../idp/dependencies/stores/ch.qos.logback.gpg | Bin 0 -> 1175 bytes
.../idp/dependencies/stores/com.beust.gpg | Bin 0 -> 1239 bytes
.../idp/dependencies/stores/com.duosecurity.gpg | Bin 0 -> 4552 bytes
.../idp/dependencies/stores/com.fasterxml.gpg | Bin 0 -> 1216 bytes
.../stores/com.fasterxml.jackson.core.gpg | Bin 0 -> 1644 bytes
.../stores/com.fasterxml.jackson.datatype.gpg | Bin 0 -> 1644 bytes
.../dependencies/stores/com.fasterxml.woodstox.gpg | Bin 0 -> 1216 bytes
.../idp/dependencies/stores/com.github.jasminb.gpg | Bin 0 -> 1529 bytes
.../stores/com.google.code.findbugs.gpg | Bin 0 -> 1178 bytes
.../dependencies/stores/com.google.errorprone.gpg | Bin 0 -> 2219 bytes
.../idp/dependencies/stores/com.google.guava.gpg | Bin 0 -> 2660 bytes
.../idp/dependencies/stores/com.google.j2objc.gpg | Bin 0 -> 1180 bytes
.../idp/dependencies/stores/com.sun.activation.gpg | Bin 0 -> 3409 bytes
.../idp/dependencies/stores/com.sun.istack.gpg | Bin 0 -> 3338 bytes
.../idp/dependencies/stores/com.sun.mail.gpg | Bin 0 -> 3419 bytes
.../idp/dependencies/stores/com.unboundid.gpg | Bin 0 -> 607 bytes
.../idp/dependencies/stores/commons-cli.gpg | Bin 0 -> 9234 bytes
.../idp/dependencies/stores/commons-codec.gpg | Bin 0 -> 2227 bytes
.../idp/dependencies/stores/commons-lang.gpg | Bin 0 -> 3512 bytes
.../idp/dependencies/stores/commons-lang3 | 0
.../net/shibboleth/idp/dependencies/stores/dom4j | 0
.../idp/dependencies/stores/eu.bitwalker.gpg | Bin 0 -> 1481 bytes
.../dependencies/stores/io.dropwizard.metrics.gpg | Bin 0 -> 3929 bytes
.../idp/dependencies/stores/jakarta.xml.bind.gpg | Bin 0 -> 3411 bytes
.../idp/dependencies/stores/javax.persistence.gpg | Bin 0 -> 3780 bytes
.../idp/dependencies/stores/joda-time.gpg | Bin 0 -> 2234 bytes
.../idp/dependencies/stores/net.bytebuddy.gpg | Bin 0 -> 3974 bytes
.../idp/dependencies/stores/net.shibboleth.ext.gpg | Bin 0 -> 3988 bytes
.../dependencies/stores/net.shibboleth.liberty.gpg | Bin 0 -> 3988 bytes
.../stores/net.shibboleth.utilities.gpg | Bin 0 -> 3988 bytes
.../shibboleth/idp/dependencies/stores/net.spy.gpg | Bin 0 -> 1206 bytes
.../idp/dependencies/stores/org.apache.commons.gpg | Bin 0 -> 1776 bytes
.../stores/org.apache.httpcomponents.gpg | Bin 0 -> 1282 bytes
.../dependencies/stores/org.apache.santuario.gpg | Bin 0 -> 1601 bytes
.../dependencies/stores/org.apache.velocity.gpg | Bin 0 -> 1187 bytes
.../idp/dependencies/stores/org.bouncycastle.gpg | Bin 0 -> 1221 bytes
.../dependencies/stores/org.checkerframework.gpg | Bin 0 -> 1228 bytes
.../dependencies/stores/org.codehaus.janino.gpg | Bin 0 -> 1185 bytes
.../dependencies/stores/org.codehaus.woodstox.gpg | Bin 0 -> 2243 bytes
.../idp/dependencies/stores/org.cryptacular.gpg | Bin 0 -> 3501 bytes
.../idp/dependencies/stores/org.dom4j.gpg | Bin 0 -> 1184 bytes
.../idp/dependencies/stores/org.glassfish.gpg | Bin 0 -> 3318 bytes
.../idp/dependencies/stores/org.glassfish.jaxb.gpg | Bin 0 -> 3338 bytes
.../idp/dependencies/stores/org.hibernate.common | 0
.../idp/dependencies/stores/org.hibernate.gpg | Bin 0 -> 2781 bytes
.../idp/dependencies/stores/org.javassist.gpg | Bin 0 -> 1517 bytes
.../shibboleth/idp/dependencies/stores/org.jboss | 0
.../idp/dependencies/stores/org.jboss.logging | 0
.../stores/org.jboss.spec.javax.transaction | 0
.../idp/dependencies/stores/org.jetbrains.gpg | Bin 0 -> 2215 bytes
.../idp/dependencies/stores/org.ldaptive.gpg | Bin 0 -> 3501 bytes
.../idp/dependencies/stores/org.opensaml.gpg | Bin 0 -> 2352 bytes
.../idp/dependencies/stores/org.slf4j.gpg | Bin 0 -> 1175 bytes
.../dependencies/stores/org.springframework.gpg | Bin 0 -> 1203 bytes
.../stores/org.springframework.webflow.gpg | Bin 0 -> 1203 bytes
.../net/shibboleth/idp/plugin/allPlugins.props | 106 +++
idp-parent/pom.xml | 47 +-
idp-profile-api/pom.xml | 32 +-
.../idp/profile/AbstractProfileAction.java | 4 +-
.../net/shibboleth/idp/profile/ScriptedAction.java | 2 +
.../OverriddenIssuerProfileConfiguration.java | 2 +-
.../idp/profile/config/SecurityConfiguration.java | 4 +-
...ntTLSValidationConfigurationLookupFunction.java | 2 +-
.../DecryptionConfigurationLookupFunction.java | 2 +-
.../EncryptionConfigurationLookupFunction.java | 2 +-
...ignatureSigningConfigurationLookupFunction.java | 2 +-
...atureValidationConfigurationLookupFunction.java | 2 +-
...pClientSecurityConfigurationLookupFunction.java | 2 +-
...ignatureSigningConfigurationLookupFunction.java | 2 +-
...atureValidationConfigurationLookupFunction.java | 2 +-
.../navigate/ScriptedContextLookupFunction.java | 1 +
.../SpringExpressionContextLookupFunction.java | 2 +-
.../idp/profile/logic/LoopDetectionPredicate.java | 131 ++++
.../idp/profile/logic/ScriptedPredicate.java | 3 +
.../profile/logic/SpringExpressionPredicate.java | 7 +-
...teTest.java => LoopDetectionPredicateTest.java} | 43 +-
.../profile/logic/RelyingPartyIdPredicateTest.java | 1 -
idp-profile-impl/pom.xml | 4 +-
.../profile/audit/impl/PopulateAuditContext.java | 2 +-
.../DefaultRelyingPartyConfigurationResolver.java | 4 +-
idp-profile-spring/pom.xml | 25 +-
.../spring/factory/FlowRelativeResourceLoader.java | 20 +-
.../metadata/AbstractMetadataProviderParser.java | 3 +-
.../filter/impl/AlgorithmFilterParser.java | 14 +-
.../metadata/filter/impl/ByReferenceParser.java | 12 +-
.../filter/impl/EntitiesDescriptorNameParser.java | 8 +-
.../filter/impl/EntityAttributesFilterParser.java | 14 +-
.../filter/impl/EntityRoleFilterParser.java | 12 +-
.../metadata/filter/impl/KeyAuthorityParser.java | 10 +-
.../filter/impl/NameIDFormatFilterParser.java | 16 +-
.../metadata/filter/impl/NodeProcessingParser.java | 14 +-
.../filter/impl/PredicateFilterParser.java | 22 +-
.../filter/impl/RequiredValidUntilParser.java | 4 +-
.../filter/impl/SchemaValidationParser.java | 4 +-
.../SignatureValidationCriteriaSetFactoryBean.java | 6 +-
.../filter/impl/SignatureValidationParser.java | 6 +-
.../credential/impl/AbstractCredentialParser.java | 4 +-
.../impl/AbstractPKIXValidationInfoParser.java | 4 +-
.../trustengine/impl/AbstractStaticPKIXParser.java | 4 +-
.../impl/AbstractTrustEngineParser.java | 4 +-
.../impl/PKIXValidationOptionsParser.java | 4 +-
.../factory/FlowRelativeResourceLoaderTest.java | 72 ++
.../spring/factory/StaticPKIXFactoryBeanTest.java | 132 ++++
.../DynamicHTTPMetadataProviderParserTest.java | 3 +-
.../idp/profile/spring/factory/idp1833-beans.xml | 11 +-
.../spring/factory/idp1833-flow-example.xml | 6 +
.../static-pkix-factory-custom-failsValidation.xml | 27 +-
.../factory/static-pkix-factory-custom-success.xml | 24 +-
.../factory/static-pkix-factory-defaults.xml | 18 +-
.../profile/spring/relyingparty/metadata/beans.xml | 6 +-
idp-saml-api/pom.xml | 4 +-
.../shibboleth/idp/saml/metadata/IdPUIInfo.java | 84 ++-
.../idp/saml/profile/SAMLAuditFields.java | 3 +
...tMetadataDrivenConfigurationLookupStrategy.java | 2 +-
.../logic/MappedEntityAttributesPredicate.java | 1 +
.../config/BrowserSSOProfileConfiguration.java | 107 ++-
.../SuppressAuthenticatingAuthorityPredicate.java | 49 ++
.../idp/saml/session/SAML2SPSession.java | 44 ++
.../idp/saml/session/SAML2SPSessionTest.java | 18 +-
idp-saml-impl/pom.xml | 4 +-
.../SAML1NameIdentifierAttributeDefinition.java | 14 +-
.../impl/SAML2NameIDAttributeDefinition.java | 10 +-
.../audit/impl/MetadataProtocolAuditExtractor.java | 35 +-
.../saml/nameid/impl/BaseTransformingDecoder.java | 46 +-
.../saml/nameid/impl/NameIDCanonicalization.java | 35 +-
.../impl/NameIdentifierCanonicalization.java | 38 +-
.../impl/InitializeAuthenticationContext.java | 13 +
.../impl/PopulateBindingAndEndpointContexts.java | 24 +
.../saml/saml2/profile/impl/AddAuthnRequest.java | 4 +-
.../profile/impl/AddAuthnStatementToAssertion.java | 68 +-
.../profile/impl/PreProcessLogoutMessage.java | 171 +++++
.../saml2/profile/impl/ProcessLogoutRequest.java | 6 -
.../saml2/profile/impl/SAMLAuthnController.java | 35 +-
.../profile/impl/ValidateSAMLAuthentication.java | 23 +-
.../impl/BestMatchLocationLookupStrategy.java | 79 +++
.../impl/SAML2SPSessionCreationStrategy.java | 31 +-
.../session/impl/SAML2SPSessionSerializer.java | 27 +-
.../idp/saml/impl/testing/TestSources.java | 1 +
.../saml2/profile/impl/AddAuthnRequestTest.java | 89 +++
.../impl/AddAuthnStatementToAssertionTest.java | 25 +-
.../profile/impl/PreProcessLogoutMessageTest.java | 104 +++
.../impl/PrepareInboundMessageContextTest.java | 2 +-
.../session/impl/SAML2SPSessionSerializerTest.java | 3 +-
.../idp/saml/impl/session/saml2SPSession.json | 2 +-
idp-schema/pom.xml | 4 +-
.../schema/shibboleth-attribute-resolver-dc.xsd | 44 +-
.../schema/shibboleth-attribute-resolver.xsd | 85 +--
idp-session-api/pom.xml | 4 +-
.../shibboleth/idp/session/AbstractIdPSession.java | 20 +-
.../session/LogoutPropagationFlowDescriptor.java | 20 +
.../net/shibboleth/idp/session/SPSessionEx.java | 12 +
.../LogoutPropagationFlowDescriptorSelector.java | 3 +-
.../net/shibboleth/idp/session/IdPSessionTest.java | 4 +-
idp-session-impl/pom.xml | 4 +-
.../idp/session/impl/PopulateSessionContext.java | 28 +-
.../shibboleth/idp/session/impl/ProcessLogout.java | 30 +-
.../idp/session/impl/StorageBackedIdPSession.java | 7 +-
.../impl/StorageBackedIdPSessionSerializer.java | 12 +
.../session/impl/PopulateSessionContextTest.java | 25 +
.../idp/session/impl/ProcessLogoutTest.java | 28 +
.../StorageBackedIdPSessionSerializerTest.java | 27 +-
.../impl/StorageBackedSessionManagerTest.java | 10 +-
.../src/test/resources/logback-test.xml | 2 +-
.../idp/session/impl/complexIdPSession.jdk8 | 2 +-
idp-tests-bom/pom.xml | 4 +-
idp-ui/pom.xml | 9 +-
.../idp/ui/context/RelyingPartyUIContext.java | 39 +-
.../shibboleth/idp/ui/impl/SetRPUIInformation.java | 18 +-
.../idp/ui/context/RelyingPartyUIContextTest.java | 6 +-
idp-war-distribution/pom.xml | 31 +-
idp-war/pom.xml | 4 +-
idp-war/src/main/webapp/WEB-INF/jsp/status.jsp | 32 +-
idp-war/src/main/webapp/WEB-INF/web.xml | 1 +
idp-war/src/main/webapp/js/jquery-3.4.1.min.js | 2 -
idp-war/src/main/webapp/js/jquery-3.6.0.min.js | 2 +
477 files changed, 8606 insertions(+), 2421 deletions(-)
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/matcher/#scripted-rhino.xml#
create mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/matcher/andMulti.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/deny1.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/deny2.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/policy2.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/policy3.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/policy4.xml
delete mode 100644 idp-attribute-filter-spring/src/test/resources/net/shibboleth/idp/attribute/filter/spring/native/policy5.xml
create mode 100644 idp-attribute-resolver-spring/src/test/java/net/shibboleth/idp/attribute/resolver/spring/IdP1676Test.java
create mode 100644 idp-attribute-resolver-spring/src/test/resources/net/shibboleth/idp/attribute/resolver/spring/ad/resolver/scopedBoth.xml
create mode 100644 idp-attribute-resolver-spring/src/test/resources/net/shibboleth/idp/attribute/resolver/spring/ad/resolver/scopedSource.xml
create mode 100644 idp-attribute-resolver-spring/src/test/resources/net/shibboleth/idp/attribute/resolver/spring/idp-1676-resolver.xml
copy idp-attribute-resolver-spring/src/test/resources/net/shibboleth/idp/attribute/resolver/spring/{service.xml => idp-1676-service.xml} (88%)
create mode 100644 idp-authn-api/src/main/java/net/shibboleth/idp/authn/principal/HOTPPrincipal.java
create mode 100644 idp-authn-impl/src/main/java/net/shibboleth/idp/authn/principal/impl/X500PrincipalSerializer.java
copy idp-consent-impl/src/test/java/net/shibboleth/idp/consent/logic/impl/HashFunctionTest.java => idp-authn-impl/src/test/java/net/shibboleth/idp/authn/principal/impl/X500PrincipalSerializerTest.java (51%)
copy idp-consent-impl/src/main/java/net/shibboleth/idp/consent/logic/impl/HashFunction.java => idp-conf-impl/src/main/java/net/shibboleth/idp/module/authn/impl/Demo.java (52%)
create mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/module/credentials/demo.htpasswd
rename idp-conf/src/main/resources/conf/{ => examples}/attribute-resolver-ldap.xml (97%)
create mode 100644 idp-conf/src/test/java/net/shibboleth/idp/test/flows/load/FlowLoadsFlowTest.java
rename idp-consent-impl/src/test/java/net/shibboleth/idp/consent/logic/impl/HashFunctionTest.java => idp-conf/src/test/java/net/shibboleth/idp/test/flows/load/LoadThisBean.java (54%)
copy idp-installer/src/main/resources/net/shibboleth/idp/installer/plugin/patchResources.xml => idp-conf/src/test/resources/conf/mvc-beans.xml (58%)
create mode 100644 idp-conf/src/test/resources/credentials/demo.htpasswd
create mode 100644 idp-conf/src/test/resources/flow-load-test/flows/import-beans.xml
create mode 100644 idp-conf/src/test/resources/flow-load-test/flows/test-flow-loads-beans.xml
create mode 100644 idp-conf/src/test/resources/flow-load-test/flows/test-flow-loads-flow.xml
create mode 100644 idp-conf/src/test/resources/flow-load-test/test-webflow-config.xml
create mode 100644 idp-installer/src/main/java/net/shibboleth/idp/installer/impl/InstallationLogger.java
create mode 100644 idp-installer/src/main/java/net/shibboleth/idp/installer/plugin/impl/PluginInfo.java
create mode 100644 idp-installer/src/test/java/net/shibboleth/idp/dependencies/DependencyTest.java
create mode 100644 idp-installer/src/test/java/net/shibboleth/idp/dependencies/GPGKeyRing.java
create mode 100644 idp-installer/src/test/java/net/shibboleth/idp/dependencies/ParsedPom.java
copy idp-session-api/src/main/java/net/shibboleth/idp/session/SPSessionEx.java => idp-installer/src/test/java/net/shibboleth/idp/dependencies/PomLoader.java (61%)
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/antlr.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/ch.qos.logback.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.beust.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.duosecurity.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.fasterxml.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.fasterxml.jackson.core.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.fasterxml.jackson.datatype.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.fasterxml.woodstox.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.github.jasminb.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.google.code.findbugs.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.google.errorprone.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.google.guava.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.google.j2objc.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.sun.activation.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.sun.istack.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.sun.mail.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/com.unboundid.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/commons-cli.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/commons-codec.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/commons-lang.gpg
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/commons-lang3 (100%)
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/dom4j (100%)
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/eu.bitwalker.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/io.dropwizard.metrics.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/jakarta.xml.bind.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/javax.persistence.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/joda-time.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/net.bytebuddy.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/net.shibboleth.ext.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/net.shibboleth.liberty.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/net.shibboleth.utilities.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/net.spy.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.apache.commons.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.apache.httpcomponents.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.apache.santuario.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.apache.velocity.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.bouncycastle.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.checkerframework.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.codehaus.janino.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.codehaus.woodstox.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.cryptacular.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.dom4j.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.glassfish.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.glassfish.jaxb.gpg
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.hibernate.common (100%)
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.hibernate.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.javassist.gpg
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.jboss (100%)
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.jboss.logging (100%)
copy idp-admin-api/src/main/resources/.gitkeep => idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.jboss.spec.javax.transaction (100%)
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.jetbrains.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.ldaptive.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.opensaml.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.slf4j.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.springframework.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/dependencies/stores/org.springframework.webflow.gpg
create mode 100644 idp-installer/src/test/resources/net/shibboleth/idp/plugin/allPlugins.props
create mode 100644 idp-profile-api/src/main/java/net/shibboleth/idp/profile/logic/LoopDetectionPredicate.java
copy idp-profile-api/src/test/java/net/shibboleth/idp/profile/logic/{RelyingPartyIdPredicateTest.java => LoopDetectionPredicateTest.java} (66%)
create mode 100644 idp-profile-spring/src/test/java/net/shibboleth/idp/profile/spring/factory/FlowRelativeResourceLoaderTest.java
create mode 100644 idp-profile-spring/src/test/java/net/shibboleth/idp/profile/spring/factory/StaticPKIXFactoryBeanTest.java
copy idp-installer/src/main/resources/net/shibboleth/idp/installer/plugin/patchResources.xml => idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/factory/idp1833-beans.xml (62%)
create mode 100644 idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/factory/idp1833-flow-example.xml
copy idp-installer/src/main/resources/net/shibboleth/idp/installer/plugin/patchResources.xml => idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/factory/static-pkix-factory-custom-failsValidation.xml (51%)
copy idp-installer/src/main/resources/net/shibboleth/idp/installer/plugin/patchResources.xml => idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/factory/static-pkix-factory-custom-success.xml (53%)
rename idp-installer/src/main/resources/net/shibboleth/idp/installer/plugin/patchResources.xml => idp-profile-spring/src/test/resources/net/shibboleth/idp/profile/spring/factory/static-pkix-factory-defaults.xml (62%)
create mode 100644 idp-saml-api/src/main/java/net/shibboleth/idp/saml/saml2/profile/config/logic/SuppressAuthenticatingAuthorityPredicate.java
rename idp-consent-impl/src/main/java/net/shibboleth/idp/consent/logic/impl/HashFunction.java => idp-saml-impl/src/main/java/net/shibboleth/idp/saml/audit/impl/MetadataProtocolAuditExtractor.java (51%)
create mode 100644 idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/impl/PreProcessLogoutMessage.java
create mode 100644 idp-saml-impl/src/main/java/net/shibboleth/idp/saml/session/impl/BestMatchLocationLookupStrategy.java
create mode 100644 idp-saml-impl/src/test/java/net/shibboleth/idp/saml/saml2/profile/impl/PreProcessLogoutMessageTest.java
delete mode 100644 idp-war/src/main/webapp/js/jquery-3.4.1.min.js
create mode 100644 idp-war/src/main/webapp/js/jquery-3.6.0.min.js
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list