[JIRA] (JCOMOIDC-54) Add untrusted audience validation to validator

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *commented* on JCOMOIDC-54 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-54?atlOrigin=eyJpIjoiMzdhOWZhNjNkODIxNDZmN2E1ODJhYjM3ZmE0YWY4MWYiLCJwIjoiaiJ9 )

Re: Add untrusted audience validation to validator ( https://shibboleth.atlassian.net/browse/JCOMOIDC-54?atlOrigin=eyJpIjoiMzdhOWZhNjNkODIxNDZmN2E1ODJhYjM3ZmE0YWY4MWYiLCJwIjoiaiJ9 )

This has been changed such that any additional audiences need to match with those that are returned from the lookup strategy e.g. from the assertionAudiences in the profile config.

This check is disabled by default as when enabled it represents a breaking change to the logic. I will look to enable this in the RP, but the OP might not need it.

( https://shibboleth.atlassian.net/browse/JCOMOIDC-54#add-comment?atlOrigin=eyJpIjoiMzdhOWZhNjNkODIxNDZmN2E1ODJhYjM3ZmE0YWY4MWYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-54#add-comment?atlOrigin=eyJpIjoiMzdhOWZhNjNkODIxNDZmN2E1ODJhYjM3ZmE0YWY4MWYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100212- sha1:e2fc486 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221215/89dd445a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c51b3c90-0935-4bfb-a369-14370a29a465
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221215/89dd445a/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-668714e5-0b04-4255-a802-789c65ef3116
Type: image/png
Size: 448 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221215/89dd445a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-7d47b7c1-cecc-4511-b742-8ef88f19d8f1
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221215/89dd445a/attachment-0005.png>