[java-identity-provider] branch main updated: Inject clock skew based on existing property.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=a2eb98d076487060db2851c1a443a2deb71f4ab7

The following commit(s) were added to refs/heads/main by this push:
       new  a2eb98d07 Inject clock skew based on existing property.
a2eb98d07 is described below

commit a2eb98d076487060db2851c1a443a2deb71f4ab7
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Jan 7 16:44:46 2021 -0500

    Inject clock skew based on existing property.
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml    | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 0965061ad..1057332a3 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -181,7 +181,7 @@
                 <bean class="org.opensaml.saml.common.binding.impl.SAMLOutboundDestinationHandler" scope="prototype"/>
                 <bean class="org.opensaml.saml.common.binding.security.impl.EndpointURLSchemeSecurityHandler" scope="prototype"/>
                 <bean class="org.opensaml.messaging.handler.impl.FunctionMessageHandler" scope="prototype"
-                    p:function="#{getObject('%{idp.authn.SAML.messageHandlerFunction:}'.trim())}" />
+                    p:function="#{getObject('%{idp.authn.SAML.outboundMessageHandlerFunction:}'.trim())}" />
                 <bean class="org.opensaml.saml.common.binding.security.impl.SAMLOutboundProtocolMessageSigningHandler" scope="prototype"
                         p:signErrorResponses="%{idp.errors.signed:true}">
                     <property name="activationCondition">
@@ -323,6 +323,8 @@
                         <bean class="org.opensaml.messaging.handler.impl.CheckExpectedIssuer" scope="prototype"
                             p:issuerLookupStrategy-ref="InboundEntityIDLookup"
                             p:expectedIssuerLookupStrategy-ref="OutboundEntityIDLookup" />
+                        <bean class="org.opensaml.messaging.handler.impl.FunctionMessageHandler" scope="prototype"
+                            p:function="#{getObject('%{idp.authn.SAML.inboundMessageHandlerFunction:}'.trim())}" />
                     </list>
                 </property>
 		     </bean>
@@ -380,6 +382,7 @@
     </bean>
 
     <bean id="AssertionValidationContextBuilder" class="org.opensaml.saml.saml2.profile.impl.DefaultAssertionValidationContextBuilder">
+        <property name="clockSkew" value="%{idp.policy.clockSkew:PT3M}" />
         <property name="checkAddress">
             <bean class="net.shibboleth.idp.saml.saml2.profile.config.logic.CheckAddressPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.