[java-idp-plugin-oidc-config] branch main updated: Renamed idp.authn.oidc.rp.client.requestobject -properties to start with idp.oidc.

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=5b5aed9ccca693cfce10c38100d02926da17066f

The following commit(s) were added to refs/heads/main by this push:
     new 5b5aed9  Renamed idp.authn.oidc.rp.client.requestobject -properties to start with idp.oidc.
5b5aed9 is described below

commit 5b5aed9ccca693cfce10c38100d02926da17066f
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Apr 21 14:33:00 2023 +0300

    Renamed idp.authn.oidc.rp.client.requestobject -properties to start with idp.oidc.
    
    They're now exploited by OP too, so they shouldn't contain the RP-specific prefix.
---
 .../net/shibboleth/idp/service/relying-party/postconfig.xml         | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 394799c..1dfcd84 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -61,9 +61,9 @@
         p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"       
         p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"        
         p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
-        p:encryptRequestObject="%{idp.authn.oidc.rp.client.requestobject.encrypted:false}"
-        p:signRequestObject="%{idp.authn.oidc.rp.client.requestobject.signed:true}"
-        p:useRequestObject="%{idp.authn.oidc.rp.client.requestobject.supported:false}"
+        p:encryptRequestObject="%{idp.oidc.requestobject.encrypted:false}"
+        p:signRequestObject="%{idp.oidc.requestobject.signed:true}"
+        p:useRequestObject="%{idp.oidc.requestobject.used:false}"
         p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
         p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
         p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.