[java-idp-oidc] branch main updated: JOIDC-153 - Attribute recipient grouping ID is not set in the token and userinfo flows

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=86812ca625857f0c3b781a7da49925e15daf5212

The following commit(s) were added to refs/heads/main by this push:
     new 86812ca6 JOIDC-153 - Attribute recipient grouping ID is not set in the token and userinfo flows
86812ca6 is described below

commit 86812ca625857f0c3b781a7da49925e15daf5212
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Apr 27 15:01:40 2023 +0300

    JOIDC-153 - Attribute recipient grouping ID is not set in the token and userinfo flows
    
    https://shibboleth.atlassian.net/browse/JOIDC-153
    
    Wired the 'SetSectorIdentifierForAttributeResolution' action to the token and userinfo
    flows. It's used in the same way as in the authorize flow.
---
 .../META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml       | 3 +++
 .../META-INF/net/shibboleth/idp/flows/oidc/token/token-flow.xml        | 2 ++
 .../META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml | 3 +++
 .../META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-flow.xml  | 1 +
 4 files changed, 9 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
index 949fc042..2fb128ce 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
@@ -117,6 +117,9 @@
     <bean id="SetSubjectFromAuthzCodeToResponseContext"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext" scope="prototype" />
 
+    <bean id="SetSectorIdentifierForAttributeResolution"
+        class="net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution" scope="prototype" />
+
     <!-- client_credentials grant handling. -->
 
     <bean id="SetAuthenticationContextClassReferenceToResponseContext"
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-flow.xml
index fb4f16c0..7add378e 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-flow.xml
@@ -58,6 +58,7 @@
         <evaluate expression="SetConsentToResponseContext" />
         <evaluate expression="InitializeSubjectContext" />
         <evaluate expression="SetSubjectFromAuthzCodeToResponseContext" />
+        <evaluate expression="SetSectorIdentifierForAttributeResolution" />
         <evaluate expression="ValidateScope" />
         <evaluate expression="ValidateAudience" />
         <evaluate expression="SetSessionIdFromAuthzCodeToResponseContext" />
@@ -78,6 +79,7 @@
         <evaluate expression="SetAuthenticationContextClassReferenceToResponseContext" />
         <evaluate expression="SetAuthenticationTimeToResponseContext" />
         <evaluate expression="SetSubjectFromSubjectContextToResponseContext" />
+        <evaluate expression="SetSectorIdentifierForAttributeResolution" />
         <evaluate expression="ValidateScope" />
         <evaluate expression="ValidateAudience" />
         <evaluate expression="SetSessionIdToResponseContext" />
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
index 2f16107c..bf5c1774 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
@@ -149,6 +149,9 @@
     <bean id="SetSubjectToResponseContext"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSubjectToResponseContext" scope="prototype" />
 
+    <bean id="SetSectorIdentifierForAttributeResolution"
+        class="net.shibboleth.idp.plugin.oidc.op.profile.impl.SetSectorIdentifierForAttributeResolution" scope="prototype" />
+
     <bean id="AddUserInfoShell" class="net.shibboleth.idp.plugin.oidc.op.userinfo.profile.impl.AddUserInfoShell" scope="prototype"
         p:issuerLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple" />
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-flow.xml
index be5f41c5..f488146d 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-flow.xml
@@ -59,6 +59,7 @@
     <action-state id="PostInitialSetup">
         <evaluate expression="InitializeSubjectContext" />
         <evaluate expression="SetSubjectToResponseContext" />
+        <evaluate expression="SetSectorIdentifierForAttributeResolution" />
         <evaluate expression="'proceed'" />
         
         <transition on="proceed" to="CheckAttributeResolution" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.