[JIRA] (JCOMOIDC-46) Review the OIDCSecurityConfiguration and SecurityContextParameters

[Philip Smart (Jira)]

Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) *created* an issue

Java Common OIDC Library ( https://shibboleth.atlassian.net/browse/JCOMOIDC?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 ) / Task ( https://shibboleth.atlassian.net/browse/JCOMOIDC-46?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 ) JCOMOIDC-46 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-46?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 ) Review the OIDCSecurityConfiguration and SecurityContextParameters ( https://shibboleth.atlassian.net/browse/JCOMOIDC-46?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 )

Issue Type: Task Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 15/Jul/22 11:26 AM Priority: Trivial Reporter: Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 )

The OIDCSecurityConfiguration extends the SecurityConfiguration with JWT related parameters for different request/response objects e.g. userInfo, RequestObject, id_token etc. Some new configs have been added for the RP. It has become messy.

The RP uses a new JWTSecurityContextParameters context to support, amongst other things, the newly typed signature trustengine.

The IdP uses an EncryptionContext over the encryption config slot in the SecurityContextParameters to support the encryption of different aspects of a SAML message.

Maybe all this could be combined into a keyed map of configs - or similar.

( https://shibboleth.atlassian.net/browse/JCOMOIDC-46#add-comment?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-46#add-comment?atlOrigin=eyJpIjoiODA3ZTg3ZTZlMGVkNDE1YTlmMzYxOWIwOGFjYjEyNzIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:365db85 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220715/eccfda81/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-e0a3800e-12f2-46fc-a6d8-4e66ffdc8078
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220715/eccfda81/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-bcc0a809-58dc-4b55-a267-55b4a676186d
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220715/eccfda81/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-1053c5ab-6553-4642-bb94-5e10d6ecbd17
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220715/eccfda81/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-fc46b9ef-c424-44a6-bef7-73f9a27c23ad
Type: image/png
Size: 468 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220715/eccfda81/attachment-0007.png>