[JIRA] (JOIDC-81) Profile config flag refreshTokensEnabled not honored by the token flow

[Henri Mikkonen (Jira)]

Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-81?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 ) JOIDC-81 ( https://shibboleth.atlassian.net/browse/JOIDC-81?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 ) Profile config flag refreshTokensEnabled not honored by the token flow ( https://shibboleth.atlassian.net/browse/JOIDC-81?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Created: 17/Mar/22 6:24 AM Fix Versions: 3.1.0 Priority: Trivial Reporter: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd )

The profile configuration flag/predicate for enabling refresh tokens is not honored by the token flow. The refresh tokens are thus issued if the RP metadata and the requested scope permit issuance, even though the profile config would deny it.

( https://shibboleth.atlassian.net/browse/JOIDC-81#add-comment?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-81#add-comment?atlOrigin=eyJpIjoiOTJiOGIxNzczNDgzNDVjZWJjZTczZTEzZWZmZWFjY2EiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100197- sha1:676e6d5 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/5ec68c0a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-eec711fe-636f-4eab-a310-99fd2a455ce4
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/5ec68c0a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-a02d60d2-6e56-48fd-8373-4ded506f166c
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/5ec68c0a/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-babd2e2e-0811-4ca6-88a2-1efa819e2b5a
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/5ec68c0a/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-bbdf7109-28e2-4123-8b6a-11b0086f8f2a
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220317/5ec68c0a/attachment-0007.png>