[java-idp-oidc] branch main updated: JCOMOIDC-29 - Consider adjustments to OIDC/OAuth profile configs

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=42b825d38e4f1c8f3da18bbb4fcaa3b7a51ce342

The following commit(s) were added to refs/heads/main by this push:
     new 42b825d3 JCOMOIDC-29 - Consider adjustments to OIDC/OAuth profile configs
42b825d3 is described below

commit 42b825d38e4f1c8f3da18bbb4fcaa3b7a51ce342
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Dec 10 09:33:44 2021 -0500

    JCOMOIDC-29 - Consider adjustments to OIDC/OAuth profile configs
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-29
    
    Revert some of refactoring after further review.
---
 .../net/shibboleth/idp/service/relying-party/postconfig.xml | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 584625d8..fbb9bb3c 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -21,8 +21,11 @@
     <bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true"
         p:issuer-ref="issuer"
         p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
+        p:forcePKCE="%{idp.oidc.forcePKCE:false}"
+        p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}" 
         p:iDTokenLifetime="%{idp.oidc.idToken.defaultLifetime:PT1H}"
         p:accessTokenLifetime="%{idp.oidc.accessToken.defaultLifetime:PT10M}"
+        p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}" />
     
     <!-- The final three are really token endpoint settings and should be removed eventually. -->
@@ -31,16 +34,10 @@
         p:authorizeCodeLifetime="%{idp.oidc.authorizeCode.defaultLifetime:PT5M}"
         p:encodeConsentInTokens="%{idp.oidc.encodeConsentInTokens:false}"
         p:encodedAttributes="%{idp.oidc.encodedAttributes:%{idp.oidc.embeddedAttributes:}}"
-        p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}"
-        p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
-        p:forcePKCE="%{idp.oidc.forcePKCE:false}"
-        p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}" />
+        p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}" />
 
     <bean id="OIDC.Token" parent="AbstractOIDCSSOProfile" lazy-init="true"
-        class="net.shibboleth.oidc.profile.config.OIDCTokenConfiguration"
-        p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
-        p:forcePKCE="%{idp.oidc.forcePKCE:false}"
-        p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}" />
+        class="net.shibboleth.oidc.profile.config.OIDCTokenConfiguration" />
     
     <bean id="OIDC.UserInfo" parent="AbstractOIDCProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.OIDCUserInfoConfiguration"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.