[java-identity-provider] branch main updated: IDP-1638 - Add hooks to customize proxied SAML request/response handling

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=028500f7f39dc2d9160fbe2ae248592e746b02e8

The following commit(s) were added to refs/heads/main by this push:
       new  028500f7f IDP-1638 - Add hooks to customize proxied SAML request/response handling
028500f7f is described below

commit 028500f7f39dc2d9160fbe2ae248592e746b02e8
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Fri Jan 8 17:02:01 2021 -0500

    IDP-1638 - Add hooks to customize proxied SAML request/response handling
    
    https://issues.shibboleth.net/jira/browse/IDP-1638
    
    Add a generic AssertionValidator hook.
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml    | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 1057332a3..fd8ee2e0c 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -374,9 +374,10 @@
                 <bean class="org.opensaml.saml.saml2.assertion.impl.AuthnStatementValidator" />
             </util:list>
         </constructor-arg>
+        <constructor-arg index="3" value="#{getObject('%{idp.authn.SAML.assertionValidator:}'.trim())}" />
         <!-- This is null b/c in this case we use a dynamically-resolved engine in the ValidationContext -->
-        <constructor-arg index="3" value="#{null}" />
-        <constructor-arg index="4">
+        <constructor-arg index="4" value="#{null}" />
+        <constructor-arg index="5">
             <bean class="org.opensaml.saml.security.impl.SAMLSignatureProfileValidator" />
         </constructor-arg>
     </bean>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.