[java-oidc-common] branch main updated: JOIDC-90 - Revocation of individual tokens

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=44e5a62a02450df8c0322e1ed25b839389957282

The following commit(s) were added to refs/heads/main by this push:
     new 44e5a62  JOIDC-90 - Revocation of individual tokens
44e5a62 is described below

commit 44e5a62a02450df8c0322e1ed25b839389957282
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Jun 28 15:12:41 2022 +0300

    JOIDC-90 - Revocation of individual tokens
    
    https://shibboleth.atlassian.net/browse/JOIDC-90
    
    Added a flag for the revocation lifetime fetching function whether to only use active profile
    config or also search the config from the tree.
---
 .../navigate/RevocationLifetimeLookupFunction.java       | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
index f81d5c0..b648d3e 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/navigate/RevocationLifetimeLookupFunction.java
@@ -40,12 +40,24 @@ import net.shibboleth.oidc.profile.oauth2.config.OAuth2TokenRevocationConfigurat
  */
 public class RevocationLifetimeLookupFunction extends AbstractRelyingPartyLookupFunction<Duration> {
 
+    /** The flag whether to use active profile only. */
+    private boolean activeProfileOnly = true;
+
+    /**
+     * Set the flag for using active profile only.
+     * 
+     * @param flag What to set.
+     */
+    public void setUseActiveProfileOnly(final boolean flag) {
+        activeProfileOnly = flag;
+    }
+    
     /** {@inheritDoc} */
     @Nullable public Duration apply(@Nullable final ProfileRequestContext input) {
         final RelyingPartyContext rpc = getRelyingPartyContextLookupStrategy().apply(input);
         if (rpc != null) {
-            final ProfileConfiguration pc = rpc.getConfiguration().getProfileConfiguration(input,
-                    OAuth2TokenRevocationConfiguration.PROFILE_ID);
+            final ProfileConfiguration pc = activeProfileOnly ? rpc.getProfileConfig() :
+                rpc.getConfiguration().getProfileConfiguration(input, OAuth2TokenRevocationConfiguration.PROFILE_ID);
             if (pc instanceof OAuth2TokenRevocationConfiguration) {
                 return ((OAuth2TokenRevocationConfiguration) pc).getRevocationLifetime(input);
             }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.