[java-idp-oidc] branch main updated: JOIDC-86 - Facilitate login_hint sanitization

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=11f09e76eaf84081d58f5e15add4c70e3de9a731

The following commit(s) were added to refs/heads/main by this push:
     new 11f09e76 JOIDC-86 - Facilitate login_hint sanitization
11f09e76 is described below

commit 11f09e76eaf84081d58f5e15add4c70e3de9a731
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Apr 1 09:15:36 2022 +0300

    JOIDC-86 - Facilitate login_hint sanitization
    
    https://shibboleth.atlassian.net/browse/JOIDC-86
    
    Support custom login_hint parsing via idp.oidc.LoginHintLookupStrategy
    property.
---
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml     | 6 +++++-
 .../net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties          | 3 +++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index e842f8a1..57d27858 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -22,7 +22,11 @@
     </bean>
 
     <bean id="InitializeAuthenticationContext"
-        class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext" scope="prototype" />
+        class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeAuthenticationContext" scope="prototype"
+        p:loginHintLookupStrategy-ref="%{idp.oidc.LoginHintLookupStrategy:DefaultRequestLoginHintLookupFunction}"/>
+
+    <bean id="DefaultRequestLoginHintLookupFunction"
+        class="net.shibboleth.idp.plugin.oidc.op.profile.context.navigate.DefaultRequestLoginHintLookupFunction" />
 
     <bean id="ProcessRequestedAuthnContext"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.ProcessRequestedAuthnContext" scope="prototype" />
diff --git a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
index cf653f1e..80115b02 100644
--- a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
+++ b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
@@ -93,6 +93,9 @@ idp.oidc.subject.salt = this_too_should_be_ch4ng3d
 # contains headers further configurable via other properties such as 'idp.hsts', 'idp.frameoptions' and 'idp.csp'.
 #idp.oidc.ResponseHeaderFilter = shibboleth.ResponseHeaderFilter
 
+# Bean used for extracting login_hint from the authentication request. The default function parses login_hint as is.
+#idp.oidc.LoginHintLookupStrategy = DefaultRequestLoginHintLookupFunction
+
 # Settings for issue-registration-access-token flow
 #idp.oidc.admin.registration.logging = IssueRegistrationAccessToken
 #idp.oidc.admin.registration.nonBrowserSupported = true

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.