[JIRA] (JCOMOIDC-23) Add OpenID Provider Configuration Document Resolver

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *commented* on JCOMOIDC-23 ( https://shibboleth.atlassian.net/browse/JCOMOIDC-23?atlOrigin=eyJpIjoiYThlOGFhYTY4ZjM1NDBjNzk1MGYwYzUwMmVhYzcwZTYiLCJwIjoiaiJ9 )

Re: Add OpenID Provider Configuration Document Resolver ( https://shibboleth.atlassian.net/browse/JCOMOIDC-23?atlOrigin=eyJpIjoiYThlOGFhYTY4ZjM1NDBjNzk1MGYwYzUwMmVhYzcwZTYiLCJwIjoiaiJ9 )

As discussed on Slack with Philip Smart ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5afecdc1eb3ffa0c596652c4 ) , the DynamicMetadataCache seems to cache objects that are configured to expire now or in the past (via expiration time strategy, and returns them before a cleanup task is run. If the cache duration is configured to 0, then on another attempt the cache notices that the item cached on previous attempt is no longer valid, but still returns it:

2022-03-04 09:17:15,711 - 127.0.0.1 - DEBUG [net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache:405] - Metadata Cache AdminMetadataPolicyCache: Resolved criteria to identifier: AdminFlowProvidedMetadataPolicy
2022-03-04 09:17:15,711 - 127.0.0.1 - DEBUG [net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache:420] - Metadata for 'AdminFlowProvidedMetadataPolicy' does not exist, is no longer valid, or is stale, attempting to fetch it
2022-03-04 09:17:15,711 - 127.0.0.1 - DEBUG [net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache:466] - Metadata Cache AdminMetadataPolicyCache: Metadata for 'AdminFlowProvidedMetadataPolicy' is stale and requires refreshing
2022-03-04 09:17:15,712 - 127.0.0.1 - ERROR [net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy:96] - Unable to read metadata file /tmp/m2e
2022-03-04 09:17:15,717 - 127.0.0.1 - ERROR [net.shibboleth.oidc.metadata.policy.impl.MetadataPolicyViaLocationFetchingStrategy:118] - Could not load a metadata policy from file /tmp/m2e
net.shibboleth.oidc.metadata.cache.CacheLoadingException: Unable to read metadata file /tmp/m2e
	at net.shibboleth.oidc.metadata.cache.impl.DefaultFileLoadingStrategy.load(DefaultFileLoadingStrategy.java:97)
Caused by: net.shibboleth.utilities.java.support.resolver.ResolverException: Metadata file '/tmp/m2e' does not exist
	at net.shibboleth.oidc.metadata.impl.ResolverHelper.validateMetadataFile(ResolverHelper.java:79)
2022-03-04 09:17:15,719 - 127.0.0.1 - WARN [net.shibboleth.oidc.metadata.cache.impl.DynamicMetadataCache:480] - Metadata Cache AdminMetadataPolicyCache: Metadata for 'AdminFlowProvidedMetadataPolicy' could not be resolved from source
2022-03-04 09:17:15,719 - 127.0.0.1 - DEBUG [net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver:160] - Metadata Resolver OIDCMetadataPolicyResolver shibboleth.oidc.admin.DefaultMetadataPolicyResolver: Attempting to filter candidate metadata via resolved Predicates
2022-03-04 09:17:15,719 - 127.0.0.1 - TRACE [net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver:167] - Metadata Resolver OIDCMetadataPolicyResolver shibboleth.oidc.admin.DefaultMetadataPolicyResolver: Resolved 0 Predicates: []
2022-03-04 09:17:15,720 - 127.0.0.1 - TRACE [net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver:175] - Metadata Resolver OIDCMetadataPolicyResolver shibboleth.oidc.admin.DefaultMetadataPolicyResolver: CriteriaSet did NOT contain SatisfyAnyCriterion
2022-03-04 09:17:15,720 - 127.0.0.1 - TRACE [net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver:179] - Metadata Resolver OIDCMetadataPolicyResolver shibboleth.oidc.admin.DefaultMetadataPolicyResolver: Effective satisyAny value: false
2022-03-04 09:17:15,720 - 127.0.0.1 - DEBUG [net.shibboleth.oidc.metadata.impl.AbstractOIDCMetadataResolver:184] - Metadata Resolver OIDCMetadataPolicyResolver shibboleth.oidc.admin.DefaultMetadataPolicyResolver: After predicate filtering 1 Metadata entities remain

( https://shibboleth.atlassian.net/browse/JCOMOIDC-23#add-comment?atlOrigin=eyJpIjoiYThlOGFhYTY4ZjM1NDBjNzk1MGYwYzUwMmVhYzcwZTYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JCOMOIDC-23#add-comment?atlOrigin=eyJpIjoiYThlOGFhYTY4ZjM1NDBjNzk1MGYwYzUwMmVhYzcwZTYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100195- sha1:2787fd6 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220304/ab3db13a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-633bce0f-ef3a-4287-818d-e0440511056e
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220304/ab3db13a/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-b518228f-e3e5-47bc-ba4a-56e63ddc359a
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220304/ab3db13a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-68a79a27-562b-4d11-aa0f-c2ca3354e1a3
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220304/ab3db13a/attachment-0005.png>