[java-identity-provider] branch main updated: IDP-2054 - Add per-SP salt for computedId connector

Scott Cantor cantor.2 at osu.edu
Wed Dec 14 20:59:24 UTC 2022


This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=5d21405b06d1efe29ddbf0f887205fbceb0be000

The following commit(s) were added to refs/heads/main by this push:
     new 5d21405b0 IDP-2054 - Add per-SP salt for computedId connector
5d21405b0 is described below

commit 5d21405b06d1efe29ddbf0f887205fbceb0be000
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Dec 14 15:59:21 2022 -0500

    IDP-2054 - Add per-SP salt for computedId connector
    
    https://shibboleth.atlassian.net/browse/IDP-2054
    
    Wire support into persistent ID generator.
---
 .../src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml  | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
index cc1336119..0a8c3cf5e 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/saml-nameid-system.xml
@@ -57,10 +57,13 @@
         class="net.shibboleth.idp.saml.nameid.impl.CryptoTransientIdGenerationStrategy"
         p:dataSealer-ref="shibboleth.DataSealer" />
 
+
     <bean id="shibboleth.ComputedPersistentIdGenerator" lazy-init="true"
         class="net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore"
         p:salt="%{idp.persistentId.salt:}"
         p:encodedSalt="%{idp.persistentId.encodedSalt:}"
+        p:saltLookupStrategy="#{getObject('shibboleth.ComputedIdSaltLookupStrategy')}"
+        p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
         p:exceptionMap="#{getObject('%{idp.persistentId.exceptionMap:shibboleth.ComputedIdExceptionMap}'.trim())}"
         p:algorithm="%{idp.persistentId.algorithm:SHA}"
         p:encoding="#{ T(net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore.Encoding).%{idp.persistentId.encoding:BASE64} }" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list