[java-oidc-common] branch main updated: JOIDC-90 - Revocation of individual tokens

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=457b302ecdea0e3bd8bdfd403d56c557a21e047f

The following commit(s) were added to refs/heads/main by this push:
     new 457b302  JOIDC-90 - Revocation of individual tokens
457b302 is described below

commit 457b302ecdea0e3bd8bdfd403d56c557a21e047f
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Jun 28 12:05:41 2022 +0300

    JOIDC-90 - Revocation of individual tokens
    
    https://shibboleth.atlassian.net/browse/JOIDC-90
    
    Changed the function to fetch the revocation lifetime from the tree of profile configurations:
    id matching OAuth2TokenRevocationConfiguration.PROFILE_ID. This enables the function to be exploited
    from the other flows, not just from the revocation flow.
---
 .../oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
index 727cf37..f81d5c0 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
@@ -44,7 +44,8 @@ public class RevocationLifetimeLookupFunction extends AbstractRelyingPartyLookup
     @Nullable public Duration apply(@Nullable final ProfileRequestContext input) {
         final RelyingPartyContext rpc = getRelyingPartyContextLookupStrategy().apply(input);
         if (rpc != null) {
-            final ProfileConfiguration pc = rpc.getProfileConfig();
+            final ProfileConfiguration pc = rpc.getConfiguration().getProfileConfiguration(input,
+                    OAuth2TokenRevocationConfiguration.PROFILE_ID);
             if (pc instanceof OAuth2TokenRevocationConfiguration) {
                 return ((OAuth2TokenRevocationConfiguration) pc).getRevocationLifetime(input);
             }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.