[java-oidc-common] branch dev/JCOMOIDC-41 updated (621b922 -> 2db64fc)
Phil Smart
philip.smart at jisc.ac.uk
Fri Apr 29 16:31:39 UTC 2022
This is an automated email from the git hooks/post-receive script.
philsmart pushed a change to branch dev/JCOMOIDC-41
in repository java-oidc-common.
from 621b922 JCOMOIDC-41 WIP.
add ccff7c7 Added missing claim for the toString() method.
add e6760f0 Added EventIds and Error messages related to PKCE validation.
add 0370189 JCOMOIDC-23 - Add OpenID Provider Configuration Document Resolver
add 3847692 Javadoc fixes
add 280f4db JCOMOIDC-28 - Support for metadata policies
add d870dd9 JCOMOIDC-23 - Add OpenID Provider Configuration Document Resolver
add 00bb5e5 Add file loading strategy test to test Exception during reading
add 04f506e Add HTTP Provider Configuration fetching strategy tests
add bcb86c9 Add missing license header
add 3704201 Add OIDC Provider Metadata Parsing Strategy test
add 2e18ee5 Toggle optional encryption default to false.
add d415561 JCOMOIDC-40 - Complete OIDCAttributeTranscoder decode values function
add 32f4b73 Fix comment
add 757fdf8 Fix Javadoc.
add 3bd4578 Update java-support.
add c225ee0 JCOMOIDC-23 - Add OpenID Provider Configuration Document Resolver
add 9e4da5b Add a fetch-through metadata cache. Where no backing store is used
add e43002d Add init method to fetch-through cache
add 1f80785 Fixed the wrong spec-type for the builder.
add a1bca34 Add profile-api to metadata-impl module
add ab62d23 Add metadata policy lookup strategy factory
add 2d05147 Identity and initialize the newly constructed OIDCMetadataPolicyResolver.
add cd2e375 Fix Javadoc and identifier naming
add f7a42ef Fix method parameter name injection in metadata policy strategy
add aef51f4 Fix checkstyle
add 61955ae JCOMOIDC-28 - Support for metadata policies
add 52799d6 Simplify metadata cache builder. Consolidate to a single builder
add 624b85c Fix test. Add headers
add ef603d4 Disable test
add 56c659f Add option to fail on duplicates.
add 0bba69f Javadoc errors.
add 22c9f55 Refactor resolve attributes profile config handling.
add ae65b63 Improve batch catch read write locking including various cleanups
add 40e70dd Extend ClientInformationManager with optional replacement.
add 51af744 JCOMOIDC-42 - Root cause logging in FilesystemClientInformationResolver
add fd15bac GEN-311 Stop populating/maintaining the third party repo.
add 3b3b902 JOIDC-21 - Use token authentication for OIDC dynamic client registration
add ce9bb52 Accidental junit ref.
add 4dbebcc Fix another junit reference.
add 3adb386 JCOMOIDC-38 - Move various support classes from the OP plugin
add 8ee7a65 Update version to 2.0.0-SNAPSHOT and bump plugin and module values.
add caaa584 Bump parent POM version.
add b781227 Lots of checkstyle fixes
add ad61b41 Refresh shibbolethKeys, removing the OBS Server key
add 9b166cb Update files to be tagged for release
add c6856e9 Bump version after release
add 1fdca02 JOIDC-7 - Support JWT access tokens for code or implicit grants
add 6d2a77a Bump commons version due to API changes.
add ce87b50 Forgot to bump rest of the POMs.
new da08e72 JCOMOIDC-41 WIP.
new 2db64fc Merge branch 'dev/JCOMOIDC-41' of git.shibboleth.net:java-oidc-common into dev/JCOMOIDC-41
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
oidc-common-attribute-api/pom.xml | 2 +-
.../AbstractOIDCAttributeTranscoder.java | 30 +-
.../transcoding/OIDCAttributeTranscoder.java | 9 +
oidc-common-attribute-impl/pom.xml | 2 +-
.../impl/OIDCStringAttributeTranscoder.java | 71 ++-
.../impl/OIDCStringAttributeTranscoderTest.java | 478 ++++++++++++++++++++-
oidc-common-bom/pom.xml | 2 +-
oidc-common-crypto-api/pom.xml | 2 +-
.../context/OAuth2ClientAuthenticationContext.java | 59 +++
.../oidc/authn/context}/package-info.java | 7 +-
.../oidc/jwk/support/RemoteJwkUtils.java | 2 -
.../oidc/jwt/claims/JWTClaimsValidation.java | 51 ---
.../oidc/jwt/claims/JWTValidationException.java | 17 +
.../shibboleth/oidc/jwt/claims}/package-info.java | 2 +-
oidc-common-crypto-impl/BackingStore.java | 20 +
oidc-common-crypto-impl/pom.xml | 2 +-
.../security/impl/JWTSignatureValidationUtil.java | 3 +-
.../jwt/claims/impl/AudienceClaimsValidator.java | 24 +-
...NumberOfClaimValuesActivationConditionTest.java | 3 +-
oidc-common-dist/.check-m2 | 1 +
oidc-common-dist/pom.xml | 9 +-
.../src/main/enforcer/shibbolethKeys.gpg | Bin 55209 -> 55669 bytes
oidc-common-metadata-api/pom.xml | 2 +-
.../AbstractEvaluableMetadataCriterion.java | 21 +-
.../oidc/metadata/BatchBackingStore.java | 13 +-
.../oidc/metadata/ClientInformationManager.java | 25 +-
.../oidc/metadata/DynamicBackingStore.java | 22 +
.../oidc/metadata/OIDCMetadataResolver.java | 21 +-
.../oidc/metadata/cache/CacheLoadingContext.java | 13 +-
.../CacheLoadingException.java} | 26 +-
.../oidc/metadata/cache/ExpirationTimeContext.java | 17 +
.../oidc/metadata/cache/LoadingStrategy.java | 40 +-
.../oidc/metadata/cache/MetadataCache.java | 20 +-
.../metadata/cache/MetadataCacheException.java | 19 +-
.../context/OIDCProviderMetadataContext.java | 17 +
.../metadata/{cache => context}/package-info.java | 4 +-
.../oidc/metadata/criterion/IssuerIDCriterion.java | 30 +-
.../criterion/ResourceLocationCriterion.java | 9 +-
.../oidc/metadata/filter/FilterException.java | 17 +
.../oidc/metadata/filter/MetadataFilter.java | 27 +-
.../metadata/filter/MetadataFilterContext.java | 17 +
.../oidc/metadata/filter/MetadataSource.java | 21 +-
.../oidc/metadata/policy/MetadataPolicy.java | 1 +
oidc-common-metadata-impl/pom.xml | 7 +-
.../metadata/cache/impl/AbstractMetadataCache.java | 36 +-
.../cache/impl/BaseMetadataCacheBuilderSpec.java | 2 +-
.../metadata/cache/impl/BatchMetadataCache.java | 188 ++++----
.../cache/impl/BatchMetadataCacheBuilder.java | 85 ----
.../cache/impl/BatchMetadataCacheBuilderSpec.java | 3 +-
.../cache/impl/DefaultFileLoadingStrategy.java | 41 +-
...efaultSourceMetadataExpirationTimeStrategy.java | 5 +-
.../metadata/cache/impl/DynamicMetadataCache.java | 21 +-
.../cache/impl/DynamicMetadataCacheBuilder.java | 85 ----
.../impl/DynamicMetadataCacheBuilderSpec.java | 3 +-
.../cache/impl/FetchThroughMetadataCache.java | 143 ++++++
.../impl/FetchThroughMetadataCacheBuilderSpec.java | 68 +++
.../metadata/cache/impl/MetadataCacheBuilder.java | 132 ++++++
.../cache/impl/MetadataCacheBuilderSpec.java | 12 +-
.../impl/MetadataPolicyLookupStrategyFactory.java | 104 +++++
.../impl/ClientInformationNodeProcessor.java | 1 -
.../impl/FilesystemClientInformationResolver.java | 2 +-
.../HTTPProviderConfigurationFetchingStrategy.java | 2 +-
.../StorageServiceClientInformationManager.java | 29 +-
.../provider/ClientSecretReferenceProvider.java | 3 +-
.../policy/impl/DefaultMetadataPolicyEnforcer.java | 35 +-
.../metadata/policy/impl/MetadataPolicyHelper.java | 3 +-
.../MetadataPolicyViaLocationFetchingStrategy.java | 32 +-
.../cache/impl/BatchMetadataCacheTest.java | 144 +++++--
...ultOIDCProviderMetadataParsingStrategyTest.java | 69 +++
.../impl/DynamicMetadataCacheBuilderTest.java | 77 ----
.../cache/impl/DynamicMetadataCacheTest.java | 83 ++--
.../cache/impl/FetchThroughMetadataCacheTest.java | 134 ++++++
...lderTest.java => MetadataCacheBuilderTest.java} | 77 ++--
.../MetadataPolicyLookupStrategyFactoryTest.java | 98 +++++
.../impl/DefaultFileLoadingStrategyTest.java | 101 +++++
...PProviderConfigurationFetchingStrategyTest.java | 186 ++++++++
.../metadata/impl/OIDCMapMetadataResolverTest.java | 3 +-
.../impl/OIDCProviderMetadataResolverTest.java | 32 +-
...StorageServiceClientInformationManagerTest.java | 19 +-
.../impl/DefaultMetadataPolicyEnforcerTest.java | 386 +++++++++--------
.../impl/OIDCMetadataPolicyResolverTest.java | 34 +-
.../metadata/impl/file-loading-strategy-test.txt | 1 +
.../metadata/impl/metadata-policy-invalid.json | 6 +
...icy-lookup-strategy-factory-test-dummy-file.txt | 1 +
...etadata-policy-lookup-strategy-factory-test.xml | 64 +++
oidc-common-plugin/pom.xml | 2 +-
.../shibboleth/oidc/common/OIDCCommonModule.java | 17 +
.../shibboleth/oidc/common/OIDCCommonPlugin.java | 17 +
.../net/shibboleth/oidc/common/module.properties | 11 +-
.../net/shibboleth/oidc/common/plugin.properties | 2 +-
oidc-common-profile-api/pom.xml | 2 +-
.../config/AbstractOIDCSSOConfiguration.java | 57 ++-
.../OIDCDynamicRegistrationConfiguration.java | 11 +-
.../profile/config/OIDCUserInfoConfiguration.java | 39 +-
.../config/logic/ResolveAttributesPredicate.java | 50 ---
.../navigate/AccessTokenTypeLookupFunction.java | 3 +
...edRegistrationMetadataPolicyLookupFunction.java | 7 +-
.../shibboleth/oidc/profile/core/OidcError.java | 16 +-
.../shibboleth/oidc/profile/core/OidcEventIds.java | 11 +
.../oidc/profile/decoding}/package-info.java | 5 +-
.../oidc/profile/encoder/OIDCMessageEncoder.java | 17 +
.../oidc/profile/encoder}/package-info.java | 5 +-
...th2ClientAuthenticableProfileConfiguration.java | 8 +-
...AbstractOAuth2TokenValidatingConfiguration.java | 6 +-
.../config/OAuth2TokenAudienceConfiguration.java | 22 +-
.../oauth2/config/OAuth2TokenConfiguration.java | 2 +-
oidc-common-profile-impl/pom.xml | 2 +-
.../impl/HTTPPostAuthnResponseDecoder.java | 5 +-
.../impl/HTTPRedirectAuthnResponseDecoder.java | 5 +-
.../oidc/profile/decoding/impl}/package-info.java | 5 +-
.../oidc/profile/logic}/package-info.java | 5 +-
oidc-common-saml-api/pom.xml | 2 +-
oidc-common-saml-impl/pom.xml | 2 +-
.../impl/OAuthRPExtensionsMarshaller.java | 7 +-
pom.xml | 10 +-
115 files changed, 3102 insertions(+), 986 deletions(-)
create mode 100644 oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/authn/context/OAuth2ClientAuthenticationContext.java
copy {oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache => oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/authn/context}/package-info.java (90%)
delete mode 100644 oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/jwt/claims/JWTClaimsValidation.java
copy {oidc-common-crypto-impl/src/main/java/net/shibboleth/oidc/security/jwt/claims/impl => oidc-common-crypto-api/src/main/java/net/shibboleth/oidc/jwt/claims}/package-info.java (94%)
create mode 100644 oidc-common-dist/.check-m2
copy oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/{ClientInformationManagerException.java => cache/CacheLoadingException.java} (69%)
copy oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/{cache => context}/package-info.java (91%)
delete mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/BatchMetadataCacheBuilder.java
delete mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/DynamicMetadataCacheBuilder.java
create mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/FetchThroughMetadataCache.java
create mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/FetchThroughMetadataCacheBuilderSpec.java
create mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/MetadataCacheBuilder.java
copy oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache/package-info.java => oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/MetadataCacheBuilderSpec.java (74%)
create mode 100644 oidc-common-metadata-impl/src/main/java/net/shibboleth/oidc/metadata/cache/impl/MetadataPolicyLookupStrategyFactory.java
create mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/cache/impl/DefaultOIDCProviderMetadataParsingStrategyTest.java
delete mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/cache/impl/DynamicMetadataCacheBuilderTest.java
create mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/cache/impl/FetchThroughMetadataCacheTest.java
rename oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/cache/impl/{BatchMetadataCacheBuilderTest.java => MetadataCacheBuilderTest.java} (52%)
create mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/cache/impl/MetadataPolicyLookupStrategyFactoryTest.java
create mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/impl/DefaultFileLoadingStrategyTest.java
create mode 100644 oidc-common-metadata-impl/src/test/java/net/shibboleth/oidc/metadata/impl/HTTPProviderConfigurationFetchingStrategyTest.java
create mode 100644 oidc-common-metadata-impl/src/test/resources/net/shibboleth/oidc/metadata/impl/file-loading-strategy-test.txt
create mode 100644 oidc-common-metadata-impl/src/test/resources/net/shibboleth/oidc/metadata/impl/metadata-policy-invalid.json
create mode 100644 oidc-common-metadata-impl/src/test/resources/net/shibboleth/oidc/metadata/impl/metadata-policy-lookup-strategy-factory-test-dummy-file.txt
create mode 100644 oidc-common-metadata-impl/src/test/resources/net/shibboleth/oidc/metadata/impl/metadata-policy-lookup-strategy-factory-test.xml
delete mode 100644 oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/logic/ResolveAttributesPredicate.java
copy {oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache => oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/decoding}/package-info.java (91%)
copy {oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache => oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/encoder}/package-info.java (92%)
copy {oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/decoding/impl}/package-info.java (91%)
copy {oidc-common-metadata-api/src/main/java/net/shibboleth/oidc/metadata/cache => oidc-common-profile-impl/src/main/java/net/shibboleth/oidc/profile/logic}/package-info.java (90%)
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list