[java-idp-oidc] branch main updated: JOIDC-53 - No claims released when consent flow is enabled for OIDC.SSO

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=474fe4aec687ca12b4b907ed2f0b3d35758c79d8

The following commit(s) were added to refs/heads/main by this push:
     new 474fe4ae JOIDC-53 - No claims released when consent flow is enabled for OIDC.SSO
474fe4ae is described below

commit 474fe4aec687ca12b4b907ed2f0b3d35758c79d8
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Mar 16 13:23:24 2022 -0400

    JOIDC-53 - No claims released when consent flow is enabled for OIDC.SSO
    
    https://shibboleth.atlassian.net/browse/JOIDC-53
    
    Small change to recognize the new per-session consent flag.
---
 .../idp/plugin/oidc/op/profile/impl/SetConsentToResponseContext.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/SetConsentToResponseContext.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/SetConsentToResponseContext.java
index d951d573..32158c4b 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/SetConsentToResponseContext.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/SetConsentToResponseContext.java
@@ -127,7 +127,7 @@ public class SetConsentToResponseContext extends AbstractOIDCResponseAction {
             return false;
         }
         
-        if (!encodeConsentPredicate.test(profileRequestContext)) {
+        if (!attributeCtx.isConsented() && !encodeConsentPredicate.test(profileRequestContext)) {
             log.debug("{} Consent is not being encoded into tokens, nothing to do", getLogPrefix());
             return false;
         }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.