[java-identity-provider] branch main updated: IDP-1708 - Applying consent to queries fails with absence of consent

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=5209a5a4fe0ee00ffa5a8944f631e02e029aaf6c

The following commit(s) were added to refs/heads/main by this push:
       new  5209a5a4f IDP-1708 - Applying consent to queries fails with absence of consent
5209a5a4f is described below

commit 5209a5a4fe0ee00ffa5a8944f631e02e029aaf6c
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Jan 25 20:02:02 2021 -0500

    IDP-1708 - Applying consent to queries fails with absence of consent
    
    https://issues.shibboleth.net/jira/browse/IDP-1708
---
 .../idp/flows/intercept/attribute-release-query-flow.xml     | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-query-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-query-flow.xml
index 2c6be972b..497f9c78c 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-query-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-query-flow.xml
@@ -35,7 +35,7 @@
 
     <decision-state id="TestForReadGlobalAttributeConsentFromStorage">
         <if test="attributeReleaseFlowDescriptor.globalConsentAllowed"
-            then="ReadGlobalAttributeConsentFromStorage" else="CheckPreviousConsents" />
+            then="ReadGlobalAttributeConsentFromStorage" else="ReleaseAttributes" />
     </decision-state>
 
     <action-state id="ReadGlobalAttributeConsentFromStorage">
@@ -49,17 +49,9 @@
     
     <decision-state id="TestForGlobalAttributeConsent">
         <if test="GlobalAttributeConsentPredicate.test(opensamlProfileRequestContext)"
-            then="proceed" else="CheckPreviousConsents" />
+            then="proceed" else="ReleaseAttributes" />
     </decision-state>
     
-    <!-- If neither consent nor global consent was given previously, return an error -->
-    <decision-state id="CheckPreviousConsents">
-        <if test="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.consent.context.ConsentContext)).getPreviousConsents().isEmpty()"
-            then="InvalidProfileContext"
-            else="ReleaseAttributes" />
-    </decision-state>
-
-
     <!-- Release attributes consented to as well as non-consentable attributes from attribute context. -->
 
     <action-state id="ReleaseAttributes">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.