[java-identity-provider] branch main updated: IDP-2054 - Add per-SP salt for computedId connector
Scott Cantor
cantor.2 at osu.edu
Wed Dec 14 20:59:24 UTC 2022
This is an automated email from the git hooks/post-receive script.
scantor pushed a commit to branch main
in repository java-identity-provider.
View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=5d21405b06d1efe29ddbf0f887205fbceb0be000
The following commit(s) were added to refs/heads/main by this push:
new 5d21405b0 IDP-2054 - Add per-SP salt for computedId connector
5d21405b0 is described below
commit 5d21405b06d1efe29ddbf0f887205fbceb0be000
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Dec 14 15:59:21 2022 -0500
IDP-2054 - Add per-SP salt for computedId connector
https://shibboleth.atlassian.net/browse/IDP-2054
Wire support into persistent ID generator.
---
.../src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml | 3 +++
1 file changed, 3 insertions(+)
diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
index cc1336119..0a8c3cf5e 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
@@ -57,10 +57,13 @@
class="net.shibboleth.idp.saml.nameid.impl.CryptoTransientIdGenerationStrategy"
p:dataSealer-ref="shibboleth.DataSealer" />
+
<bean id="shibboleth.ComputedPersistentIdGenerator" lazy-init="true"
class="net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore"
p:salt="%{idp.persistentId.salt:}"
p:encodedSalt="%{idp.persistentId.encodedSalt:}"
+ p:saltLookupStrategy="#{getObject('shibboleth.ComputedIdSaltLookupStrategy')}"
+ p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
p:exceptionMap="#{getObject('%{idp.persistentId.exceptionMap:shibboleth.ComputedIdExceptionMap}'.trim())}"
p:algorithm="%{idp.persistentId.algorithm:SHA}"
p:encoding="#{ T(net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore.Encoding).%{idp.persistentId.encoding:BASE64} }" />
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list