[JIRA] (IDP-1980) Add step during session validation to check session revocation list

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 ) / Sub-task ( https://shibboleth.atlassian.net/browse/IDP-1980?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 ) IDP-1980 ( https://shibboleth.atlassian.net/browse/IDP-1980?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 ) Add step during session validation to check session revocation list ( https://shibboleth.atlassian.net/browse/IDP-1980?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 )

Issue Type: Sub-task Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Profile Handling, Session Created: 21/Jul/22 11:46 AM Fix Versions: 4.3.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

We need to define some set of one or more revocation criteria for sessions, define a storage format for them to be read back, and then implement appropriate checks in the session validation step(s) to enforce that. At minimum, there should be revocation by principal name, based on the canonical name in the session but I could imagine doing it by address too. May need other criteria.

( https://shibboleth.atlassian.net/browse/IDP-1980#add-comment?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1980#add-comment?atlOrigin=eyJpIjoiNDM4NDViYzk5MmNhNDdhZmE4ZTQ5ZGMyNTA0MjdmNzgiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100202- sha1:c075b5d )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220721/5a4252f4/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-c4361df0-dd5e-4179-b845-7f071ca1e875
Type: image/png
Size: 452 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220721/5a4252f4/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-18b9b730-6eda-45f8-aabb-c63223401a2b
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220721/5a4252f4/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-ca486ebf-a425-40b9-b6a9-50ff97efe88f
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220721/5a4252f4/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-4a6fcb63-e60c-41eb-b615-5ff01c72838c
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220721/5a4252f4/attachment-0007.png>