[java-identity-provider] branch main updated: IDP-1856 - Session-specific consent not visible for the backend flows

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=500b45e6fa9511cbf4c8b6c642e22947d256935f

The following commit(s) were added to refs/heads/main by this push:
     new 500b45e6f IDP-1856 - Session-specific consent not visible for the backend flows
500b45e6f is described below

commit 500b45e6fa9511cbf4c8b6c642e22947d256935f
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Mar 16 13:54:32 2022 -0400

    IDP-1856 - Session-specific consent not visible for the backend flows
    
    https://shibboleth.atlassian.net/browse/IDP-1856
    
    Adjusted new flag so it only populates on per-request consent.
---
 .../net/shibboleth/idp/flows/intercept/attribute-release-flow.xml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-flow.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-flow.xml
index 0f1ae1028..189525d7a 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-flow.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/intercept/attribute-release-flow.xml
@@ -149,10 +149,6 @@
     <!-- If global consent was given by user, create appropriate storage result and end flow. -->
 
     <decision-state id="TestForGlobalConsent">
-        <on-entry>
-            <!-- Note consent obtained for subsequent profile use. -->
-            <evaluate expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.profile.context.RelyingPartyContext)).getSubcontext(T(net.shibboleth.idp.attribute.context.AttributeContext)).setConsented(true)" />
-        </on-entry>
         <if test="requestParameters._shib_idp_consentOptions == '_shib_idp_globalConsent'"
             then="GlobalConsent" else="ExtractConsent" />
     </decision-state>
@@ -195,11 +191,13 @@
     <!-- Determine whether consent should be stored or not. -->
     
     <decision-state id="TestForDoNotRememberConsent">
+        <on-entry>
+            <evaluate expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.profile.context.RelyingPartyContext)).getSubcontext(T(net.shibboleth.idp.attribute.context.AttributeContext)).setConsented(requestParameters._shib_idp_consentOptions == '_shib_idp_doNotRememberConsent') " />
+        </on-entry>
         <if test="requestParameters._shib_idp_consentOptions == '_shib_idp_doNotRememberConsent'"
             then="ReleaseAttributes" else="CreateResult" />
     </decision-state>
 
-
     <!-- Create result to be stored by interceptor flow. -->
 
     <action-state id="CreateResult">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.