[java-idp-oidc] branch main updated: JOIDC-142 - Improve Request Object handling and configuration

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=567ad2b062c34a1ef8e0b388a65599675441e338

The following commit(s) were added to refs/heads/main by this push:
     new 567ad2b0 JOIDC-142 - Improve Request Object handling and configuration
567ad2b0 is described below

commit 567ad2b062c34a1ef8e0b388a65599675441e338
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Apr 25 10:29:52 2023 +0300

    JOIDC-142 - Improve Request Object handling and configuration
    
    https://shibboleth.atlassian.net/browse/JOIDC-142
    
    Included the request object (use/sign/encryption) properties into the default
    oidc.properties file.
---
 .../net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties       | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
index dde2b56f..4296aba3 100644
--- a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
+++ b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
@@ -28,6 +28,15 @@ idp.oidc.issuer = https://your.issuer.example.org
 # The acceptable client authentication methods
 #idp.oidc.tokenEndpointAuthMethods = client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt
 
+# Set to true to enforce use of request objects
+#idp.oidc.requestobject.used = false
+
+# Set to false to allow unsigned request objects
+#idp.oidc.requestobject.signed = true
+
+# Set to true to enforce encryption of request objects
+#idp.oidc.requestobject.encrypted = false
+
 # Default lifetime of OIDC tokens (issued to the client or against the OP itself)
 #idp.oidc.authorizeCode.defaultLifetime = PT5M
 #idp.oidc.accessToken.defaultLifetime = PT10M

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.