[JIRA] (IDP-1884) Need a way to auto-inject signing creds into DefaultRelyingPartyConfigurationResolver

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 ) / Improvement ( https://shibboleth.atlassian.net/browse/IDP-1884?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 ) IDP-1884 ( https://shibboleth.atlassian.net/browse/IDP-1884?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 ) Need a way to auto-inject signing creds into DefaultRelyingPartyConfigurationResolver ( https://shibboleth.atlassian.net/browse/IDP-1884?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 )

Issue Type: Improvement Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Relying Party Created: 01/Dec/21 11:40 AM Fix Versions: 4.2.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

There's a gap right now in how we handle the original SAML creds vs. what gets added later by e.g. the OP plugin because the signing keys there don't get included when calling getSigningCredentials.

We hardwired that and just inject the original list of keys, so the plugin can't merge its own set in.

We use this method with the delegation code to verify the IdP's SAML assertions, and even though that's probably going away, we need the same kind of thing to be able to verify the OP's own JWTs for introspection or the user_info endpoint.

Given how we retrofitted this in other cases for plugins, probably we need a marker interface to wrap the keys that will be auto-wired into the resolver class.

( https://shibboleth.atlassian.net/browse/IDP-1884#add-comment?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1884#add-comment?atlOrigin=eyJpIjoiNjcxYjllM2ZiNzcxNDM3MTg3MWVmYTA3YWY4ZWQ4MTMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:2d02531 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211201/66963754/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c3c039a1-9cf5-4127-947d-bd8ef73c1e23
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211201/66963754/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-b004b036-0777-4c96-886c-a89bd266e421
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211201/66963754/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-9255e822-d558-4aac-8dd7-da9e268eb03f
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211201/66963754/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-cfbb12a8-ba23-48c8-93f3-46eabe5eabcb
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211201/66963754/attachment-0007.png>