[java-idp-oidc] branch main updated: Add some default properties to file.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=a0a6678635288d012c8f46442c0b3274824a18f2

The following commit(s) were added to refs/heads/main by this push:
     new a0a66786 Add some default properties to file.
a0a66786 is described below

commit a0a6678635288d012c8f46442c0b3274824a18f2
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Feb 10 13:43:22 2022 -0500

    Add some default properties to file.
---
 .../shibboleth/idp/plugin/oidc/op/conf/oidc.properties  | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
index 387f3ec9..ee6c0592 100644
--- a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
+++ b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
@@ -28,7 +28,7 @@ idp.oidc.issuer = https://your.issuer.example.org
 # The acceptable client authentication methods
 #idp.oidc.tokenEndpointAuthMethods = client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt
 
-# Default lifetime of oidc tokens
+# Default lifetime of OIDC tokens (issued to the client or against the OP itself)
 #idp.oidc.authorizeCode.defaultLifetime = PT5M
 #idp.oidc.accessToken.defaultLifetime = PT10M
 #idp.oidc.refreshToken.defaultLifetime = PT2H
@@ -45,6 +45,9 @@ idp.signing.oidc.es.key = %{idp.home}/credentials/idp-signing-es.jwk
 # Request object decryption key
 idp.signing.oidc.rsa.enc.key = %{idp.home}/credentials/idp-encryption-rsa.jwk
 
+# Set false to preclude issuing unencrypted ID/UserInfo tokens without specific overrides
+#idp.oidc.encryptionOptional = true
+
 #PKCE/AppAuth related properties
 #idp.oidc.forcePKCE = false
 #idp.oidc.allowPKCEPlain = false
@@ -86,6 +89,18 @@ idp.oidc.subject.salt = this_too_should_be_ch4ng3d
 #idp.oidc.config.minRefreshDelay = PT5M
 #idp.oidc.config.maxRefreshDelay = PT4H
 
+#
+# OAuth2 Settings - these typically involve generic OAuth 2.0 use cases
+#
+
+# Default handling of generic OAuth tokens (for use against arbitrary resource servers)
+#idp.oauth2.accessToken.defaultLifetime = PT10M
+# Set to JWT if desired as a default.
+#idp.oauth2.accessToken.type =
+
+# Set false to preclude issuing unencrypted JWT access tokens without specific overrides
+#idp.oauth2.encryptionOptional = true
+
 # Regular expression matching OAuth login flows to enable.
 # For most deployments, the default is sufficient to accomodate a variety of methods
 #idp.oauth2.authn.flows = OAuth2Client

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.