[java-identity-provider] branch maint-4 updated: IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch maint-4
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=fce25a07f2272f72498bd3300241d41f01804f2d

The following commit(s) were added to refs/heads/maint-4 by this push:
     new fce25a07f IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override
fce25a07f is described below

commit fce25a07f2272f72498bd3300241d41f01804f2d
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Oct 18 09:19:28 2022 -0400

    IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override
    
    https://shibboleth.atlassian.net/browse/IDP-1935
    
    Brute force fix to override collection of valid recipients.
---
 .../src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
index c4b2261a8..1861e155e 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
@@ -402,7 +402,7 @@
     
     <!-- Defines how the system locates EncryptedKey elements sent in messages containing encrypted objects. -->
     <bean id="defaultEncryptedKeyResolver" class="org.opensaml.xmlsec.encryption.support.ChainingEncryptedKeyResolver"
-            c:recipient-ref="entityID">
+            c:recipients="#{getObject('shibboleth.DecryptionRecipients') ?: getObject('entityID')}">
         <constructor-arg name="encKeyResolvers">
             <list>
                 <bean class="org.opensaml.xmlsec.encryption.support.InlineEncryptedKeyResolver" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.