[java-identity-provider] branch main updated: IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=0f5729f995c92dd06feac74219a3ee140abf196e

The following commit(s) were added to refs/heads/main by this push:
     new 0f5729f99 IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override
0f5729f99 is described below

commit 0f5729f995c92dd06feac74219a3ee140abf196e
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Oct 18 09:19:28 2022 -0400

    IDP-1935 - SAML2 Auth flow fails to decrypt with responder id override
    
    https://shibboleth.atlassian.net/browse/IDP-1935
    
    Brute force fix to override collection of valid recipients.
---
 .../src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
index 0c6210e5a..6d71c5520 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/relying-party-system.xml
@@ -400,7 +400,7 @@
     
     <!-- Defines how the system locates EncryptedKey elements sent in messages containing encrypted objects. -->
     <bean id="defaultEncryptedKeyResolver" class="org.opensaml.xmlsec.encryption.support.ChainingEncryptedKeyResolver"
-            c:recipient-ref="entityID">
+            c:recipients="#{getObject('shibboleth.DecryptionRecipients') ?: getObject('entityID')}">
         <constructor-arg name="encKeyResolvers">
             <list>
                 <bean class="org.opensaml.xmlsec.encryption.support.InlineEncryptedKeyResolver" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.