[java-idp-oidc] branch main updated: JOIDC-142 - Improve Request Object handling and configuration

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=d250118c8a78142ac6e5586266654af30773bfc1

The following commit(s) were added to refs/heads/main by this push:
     new d250118c JOIDC-142 - Improve Request Object handling and configuration
d250118c is described below

commit d250118c8a78142ac6e5586266654af30773bfc1
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Apr 21 14:59:03 2023 +0300

    JOIDC-142 - Improve Request Object handling and configuration
    
    https://shibboleth.atlassian.net/browse/JOIDC-142
    
    Wired useRequestObject, signRequestObject and encryptRequestObject to the
    OIDC.SSO.MDDriven profile.
---
 .../idp/service/relying-party/postconfig.xml       | 24 ++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 02b2f5e4..39f90f51 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -291,6 +291,30 @@
                 p:propertyType="#{T(net.shibboleth.idp.profile.config.SecurityConfiguration)}"
                 p:defaultValue-ref="%{idp.security.oidc.authorize.config:shibboleth.oidc.DefaultSecurityConfiguration}" />
         </property>
+        <property name="encryptRequestObjectPredicate">
+            <bean class="net.shibboleth.utilities.java.support.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="encryptRequestObject" />
+                </constructor-arg>
+                <constructor-arg value="%{idp.oidc.requestobject.encrypted:false}" />
+            </bean>
+        </property>
+        <property name="signRequestObjectPredicate">
+            <bean class="net.shibboleth.utilities.java.support.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="signRequestObject" />
+                </constructor-arg>
+                <constructor-arg value="%{idp.oidc.requestobject.signed:true}" />
+            </bean>
+        </property>
+        <property name="useRequestObjectPredicate">
+            <bean class="net.shibboleth.utilities.java.support.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="useRequestObject" />
+                </constructor-arg>
+                <constructor-arg value="%{idp.oidc.requestobject.used:false}" />
+            </bean>
+        </property>
     </bean>
     
     <bean id="OIDC.UserInfo.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.