[JIRA] (JOIDCRP-10) Improve scope resolution for Authentication Requests

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue

IdP Plugin - OIDC RP ( https://shibboleth.atlassian.net/browse/JOIDCRP?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 ) JOIDCRP-10 ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 ) Improve scope resolution for Authentication Requests ( https://shibboleth.atlassian.net/browse/JOIDCRP-10?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 )

Issue Type: Task Assignee: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) Components: oidc-rp-impl Created: 17/Feb/22 10:58 AM Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )

Currently, requested scopes for an OP are defined in OIDC client information metadata e.g.

 {
   "issuer": "https://localhost:9918",
   "scope": "openid info profile email address phone",
   "client_id": "demo_rp",
   "response_types": [
     "id_token",
     "id_token token"
   ]
 },

The scopes are pulled off the resolved client information metadata during authentication request constructions. This is deficient because:

* It just pulls them off the client information object, the RP does not have a pluggable resolver type implementation. We could add one when everything else is in place, perhaps.
* It is global for all users of that RP->OP pair. * A similar work item in the OP already exists JIRA??

( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDCRP-10#add-comment?atlOrigin=eyJpIjoiZjQ1NzMxOTFlOWRkNDYyZmJjMmUzNDZiMmY0NDI5ZDMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100192- sha1:e250074 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/21f39845/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-db3b8a08-7fa4-4800-844c-6a2f6a763a57
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/21f39845/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-da1d2047-d3bd-4bb0-a14f-174365d98e50
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/21f39845/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-5a1b6660-277b-43a8-846e-670743e7215c
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/21f39845/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-dc6e7eba-dc7e-4cbc-9ab6-9c998aac6426
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220217/21f39845/attachment-0007.png>