[JIRA] (IDP-1935) SAML2 Auth flow fails to decrypt when using overridden responder id.

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *commented* on IDP-1935 ( https://shibboleth.atlassian.net/browse/IDP-1935?atlOrigin=eyJpIjoiZGQ4ZGY2MzYxMjM2NDRlZGE1ZDRkNWY1YWFkMzZjZTgiLCJwIjoiaiJ9 )

Re: SAML2 Auth flow fails to decrypt when using overridden responder id. ( https://shibboleth.atlassian.net/browse/IDP-1935?atlOrigin=eyJpIjoiZGQ4ZGY2MzYxMjM2NDRlZGE1ZDRkNWY1YWFkMzZjZTgiLCJwIjoiaiJ9 )

I think the simplest fix here is going to be to add a lookup-based option for getting the recipient(s) that’s based on ProfileRequestContext, since that’s usable in OpenSAML anyway, then we shouldn’t need new key resolver classes or too much of an API change.

This should be an API addition, so it can be slipped into 4.3.

( https://shibboleth.atlassian.net/browse/IDP-1935#add-comment?atlOrigin=eyJpIjoiZGQ4ZGY2MzYxMjM2NDRlZGE1ZDRkNWY1YWFkMzZjZTgiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1935#add-comment?atlOrigin=eyJpIjoiZGQ4ZGY2MzYxMjM2NDRlZGE1ZDRkNWY1YWFkMzZjZTgiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100209- sha1:597f6a7 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221018/9e876c82/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-b8ffb111-f3af-43cd-ae0b-36f0554065cf
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221018/9e876c82/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-1999ee0e-7d97-4189-a265-e7f270256254
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221018/9e876c82/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-61007396-cb29-4fe7-bcdb-2b1888a48e3e
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221018/9e876c82/attachment-0005.png>