[java-idp-plugin-oidc-config] branch main updated: Remove authn prefix part from RP properties

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=8e3d7f38956a47524be3e45f1675ad5439d26652

The following commit(s) were added to refs/heads/main by this push:
     new 8e3d7f3  Remove authn prefix part from RP properties
8e3d7f3 is described below

commit 8e3d7f38956a47524be3e45f1675ad5439d26652
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Apr 28 14:24:33 2023 +0100

    Remove authn prefix part from RP properties
---
 .../idp/service/relying-party/postconfig.xml         | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 1dfcd84..6c7a239 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -48,9 +48,9 @@
         p:accessTokenLifetime="%{idp.oidc.accessToken.defaultLifetime:PT10M}"
         p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"        
-        p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
-        p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
-        p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
+        p:tokenEndpointAuthMethod="%{idp.oidc.rp.client.authenticationMethod:client_secret_basic}"
+        p:clientId="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.oidc.rp.client.clientId:}'}"
+        p:clientCredential="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
 
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        
@@ -58,16 +58,16 @@
         p:encodeConsentInTokens="%{idp.oidc.encodeConsentInTokens:false}"
         p:encodedAttributes="%{idp.oidc.encodedAttributes:%{idp.oidc.embeddedAttributes:}}"
         p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}"        
-        p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"       
-        p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"        
-        p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
+        p:httpRequestMethod="%{idp.oidc.rp.httpRequestMethod:GET}"       
+        p:retrieveUserInfoEndpointClaims="%{idp.oidc.rp.client.userinfo.enabled:true}"        
+        p:redirectUriOverride="%{idp.oidc.rp.client.redirectURI:#{null}}"
         p:encryptRequestObject="%{idp.oidc.requestobject.encrypted:false}"
         p:signRequestObject="%{idp.oidc.requestobject.signed:true}"
         p:useRequestObject="%{idp.oidc.requestobject.used:false}"
-        p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
-        p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
-        p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"
-        p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
+        p:responseMode="%{idp.oidc.rp.client.responseMode:#{null}}"
+        p:tlsServerValidationSufficient="%{idp.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
+        p:userInfoHttpRequestMethod="%{idp.oidc.rp.client.userinfo.httpRequestMethod:GET}"
+        p:scopes="%{idp.oidc.rp.client.scopes:#{null}}">
         <property name="forceAuthnPredicate">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.