[java-idp-plugin-oidc-rp] branch main updated: Changes to "iat" claim validator.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=18f4593ccd65c6a20dca01de57a431a20f63b338

The following commit(s) were added to refs/heads/main by this push:
     new 18f4593  Changes to "iat" claim validator.
18f4593 is described below

commit 18f4593ccd65c6a20dca01de57a431a20f63b338
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Dec 30 12:19:48 2021 -0500

    Changes to "iat" claim validator.
---
 .../flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
index cae3a8f..b5c4213 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
@@ -187,7 +187,8 @@
                 p:clockSkew="%{idp.duo.oidc.jwt.verifier.clockSkew:PT60S}"/>
              <bean id="issuedAtClaimValidator" 
                 class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
-                p:iatWindow="%{idp.duo.oidc.jwt.verifier.iatWindow:PT60S}"/>
+                p:clockSkew="%{idp.duo.oidc.jwt.verifier.clockSkew:PT60S}"
+                p:messageLifetime="%{idp.duo.oidc.jwt.verifier.messageLifetime:PT60S}"/>
             
              <bean id="authenticationTimeClaimValidator" 
                 class="net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.