[JIRA] (JCOMOIDC-28) Support for metadata policies

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *created* an issue

Java Common OIDC Library ( https://shibboleth.atlassian.net/browse/JCOMOIDC?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/JCOMOIDC-28?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 ) JCOMOIDC-28 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-28?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 ) Support for metadata policies ( https://shibboleth.atlassian.net/browse/JCOMOIDC-28?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 )

Issue Type: New Feature Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 03/Dec/21 12:28 AM Priority: Trivial Reporter: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd )

As a part of JOIDC-21 ( https://shibboleth.atlassian.net/browse/JOIDC-21 ) In Progress it was noticed that the mechanism to have policy inside the access tokens for dynamic client registration is useful outside the tokens too: the deployers should also have control to configure accepted dynamic client registration request values. Also with the open dynamic client registration, i.e. when the RPs are not authenticated at all.

The OpenID Connect Federation 1.0 [1] (currently draft 17, September 2021) defines Metadata Policy (see section 5.1) that fits our needs even though we're not currently implementing the federation policy nor API. The implementation should be placed in the commons library in order to serve both the OP and the upcoming RP plugins.

[1] https://openid.net/specs/openid-connect-federation-1_0.htm

( https://shibboleth.atlassian.net/browse/JCOMOIDC-28#add-comment?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-28#add-comment?atlOrigin=eyJpIjoiMjdiNzIzNzQxZDEzNDRiNGI1YTIzMzU0YjJkOTQ3ZDYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100183- sha1:844c6ad )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211203/330a43ed/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-92888793-864a-40a8-ac3b-512642bfb201
Type: image/png
Size: 341 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211203/330a43ed/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-db289c83-a1be-4864-a1a9-3d3658d13b33
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211203/330a43ed/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-fc2b52cf-b5a2-49f2-b267-e0248cd395ce
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211203/330a43ed/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-97844410-d927-47b0-9ac2-e70424138c3e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211203/330a43ed/attachment-0007.png>