[java-idp-oidc] branch main updated: JOIDC-51 - Need to populate an SPSession for each OIDC RP accessed

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=8887f9baa53d4293207c3212cbf78b47ec6eb67b

The following commit(s) were added to refs/heads/main by this push:
     new 8887f9ba JOIDC-51 - Need to populate an SPSession for each OIDC RP accessed
8887f9ba is described below

commit 8887f9baa53d4293207c3212cbf78b47ec6eb67b
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Mar 2 17:50:34 2022 +0200

    JOIDC-51 - Need to populate an SPSession for each OIDC RP accessed
    
    https://shibboleth.atlassian.net/browse/JOIDC-51
    
    Exploit the existing UpdateSessionWithSPSession together with the existing
    SAML2SPSessionCreationStrategy in order to build a BasicSPSession. It is
    put to the IdP session during the OIDC authentication flow.
---
 .../shibboleth/idp/flows/oidc/authorize/authorize-beans.xml    | 10 ++++++++++
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-flow.xml |  1 +
 2 files changed, 11 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index 85a953b8..e842f8a1 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -367,6 +367,16 @@
         </property>
     </bean>
 
+    <bean id="UpdateSessionWithSPSession"
+            class="net.shibboleth.idp.session.impl.UpdateSessionWithSPSession" scope="prototype"
+            p:activationCondition="%{idp.session.trackSPSessions:false}"
+            p:sessionManager-ref="shibboleth.SessionManager">
+        <property name="SPSessionCreationStrategy">
+            <bean class="net.shibboleth.idp.saml.session.impl.SAML2SPSessionCreationStrategy"
+                c:lifetime="%{idp.session.defaultSPlifetime:PT2H}"/>
+        </property>
+    </bean>
+
     <bean id="FormOutboundMessage"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.FormOutboundAuthenticationResponseMessage" scope="prototype" />
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-flow.xml
index 7d2e6483..9537598e 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-flow.xml
@@ -127,6 +127,7 @@
         <evaluate expression="AddAuthorizationCodeHashToIDToken" />
         <evaluate expression="SignIDToken" />
         <evaluate expression="EncryptIDToken" />
+        <evaluate expression="UpdateSessionWithSPSession" />
         <evaluate expression="'proceed'" />
         <transition on="proceed" to="PopulateClientStorageSaveContext" />
      </action-state>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.