[java-identity-provider] branch main updated: IDP-1872 - Use __Host- prefix cookie names to harden cookies

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=e4853d82a762a0dfb21ad6da23b68ec932a9ecf6

The following commit(s) were added to refs/heads/main by this push:
     new e4853d82a IDP-1872 - Use __Host- prefix cookie names to harden cookies
e4853d82a is described below

commit e4853d82a762a0dfb21ad6da23b68ec932a9ecf6
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Nov 10 16:19:01 2021 -0500

    IDP-1872 - Use __Host- prefix cookie names to harden cookies
    
    https://shibboleth.atlassian.net/browse/IDP-1872
    
    Expose SPNEGO cookie name property.
---
 .../resources/net/shibboleth/idp/flows/authn/spnego-authn-beans.xml    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/spnego-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/spnego-authn-beans.xml
index d1dd9ddd6..dbddfac61 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/spnego-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/spnego-authn-beans.xml
@@ -55,7 +55,8 @@
             
     <bean id="SPNEGOAutoLoginManager"
           class="net.shibboleth.idp.authn.spnego.impl.SPNEGOAutoLoginManager"
-          p:cookieManager-ref="shibboleth.UserPrefsCookieManager" />
+          p:cookieManager-ref="shibboleth.UserPrefsCookieManager"
+          p:cookieName="%{idp.authn.SPNEGO.cookieName:_idp_spnego_autologin}" />
 
     <bean id="PopulateSubjectCanonicalizationContext"
         class="net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext" scope="prototype"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.