[java-idp-oidc] branch main updated: JOIDC-34 Add properties to discovery flow for adjust metadata resolver

Henri Mikkonen henri.mikkonen at iki.fi
Fri Mar 12 10:35:34 UTC 2021


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=adea44b8121c3c0bfa472f2b27996d3b813fef3a

The following commit(s) were added to refs/heads/main by this push:
       new  adea44b8  JOIDC-34 Add properties to discovery flow for adjust metadata resolver
adea44b8 is described below

commit adea44b8121c3c0bfa472f2b27996d3b813fef3a
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Mar 12 12:35:10 2021 +0200

    JOIDC-34 Add properties to discovery flow for adjust metadata resolver
    
    https://issues.shibboleth.net/jira/browse/JOIDC-34
---
 .../net/shibboleth/idp/flows/oidc/discovery/discovery-beans.xml       | 2 ++
 .../resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties  | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/discovery/discovery-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/discovery/discovery-beans.xml
index bc6382ab..85e0e3c7 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/discovery/discovery-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/discovery/discovery-beans.xml
@@ -28,6 +28,8 @@
 
     <bean id="shibboleth.oidc.DefaultOpenIdConfigurationResolver"
         class="net.shibboleth.idp.plugin.oidc.op.metadata.impl.DynamicFilesystemProviderMetadataResolver"
+        p:minRefreshDelay="%{idp.oidc.config.minRefreshDelay:PT5M}"
+        p:maxRefreshDelay="%{idp.oidc.config.maxRefreshDelay:PT4H}"
         c:metadata-ref="MetadataSkeleton">
         <property name="dynamicValueResolvers">
             <map value-type="net.shibboleth.idp.plugin.oidc.op.metadata.resolver.MetadataValueResolver">
diff --git a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
index a7dc49dd..aa9368c6 100644
--- a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
+++ b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
@@ -75,3 +75,7 @@ idp.oidc.subject.salt = this_too_should_be_ch4ng3d
 
 # Upgrade interval to the remote JWKs
 #idp.oidc.jwksuri.fetchInterval = PT30M
+
+# Lower bound on the next file refresh from the time calculated based on the previous attempt for OP's own metadata (configuration-flow).
+#idp.oidc.config.minRefreshDelay = PT5M
+#idp.oidc.config.maxRefreshDelay = PT4H
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list