[JIRA] (IDP-2020) SecurityConfiguration on AbstractProfileConfiguration is SAML-specific

Scott Cantor (Jira) jira at shibboleth.atlassian.net
Thu Oct 13 17:43:06 UTC 2022


Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-2020 ( https://shibboleth.atlassian.net/browse/IDP-2020?atlOrigin=eyJpIjoiYmM0ZWFjZDcwMGExNDgwMWFhMTMxNzdlZWQ5ZDA0YTIiLCJwIjoiaiJ9 )

Re: SecurityConfiguration on AbstractProfileConfiguration is SAML-specific ( https://shibboleth.atlassian.net/browse/IDP-2020?atlOrigin=eyJpIjoiYmM0ZWFjZDcwMGExNDgwMWFhMTMxNzdlZWQ5ZDA0YTIiLCJwIjoiaiJ9 )

Seems like an obvious direction is to add an XMLSecurityConfiguration into the mix, but my only hesitation is that the RelyingParty resolver layer has a “default” configuration object. It’s a bit awkward for that to include the XML methods but not the OIDC ones (it’s just not obvious why including either really makes sense at all).

I guess we can live with it and just accept that for the OIDC/OAuth profiles that they have to inject an alternative object at the profile level and if it has to fall back to the default the type check will fail and the lookups for settings will just fail.

( https://shibboleth.atlassian.net/browse/IDP-2020#add-comment?atlOrigin=eyJpIjoiYmM0ZWFjZDcwMGExNDgwMWFhMTMxNzdlZWQ5ZDA0YTIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2020#add-comment?atlOrigin=eyJpIjoiYmM0ZWFjZDcwMGExNDgwMWFhMTMxNzdlZWQ5ZDA0YTIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100208- sha1:492d0ce )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/6d7aa39a/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-ff0432c0-18e8-425b-9fc2-191c28e9c04f
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/6d7aa39a/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-1d6b108b-5b8e-446d-8e9b-e534d72b9c64
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/6d7aa39a/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-19391577-7782-4d27-92a1-2da742862e2e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221013/6d7aa39a/attachment-0005.png>


More information about the commits mailing list