[java-idp-plugin-oidc-config] branch main updated: JOIDC-152 - Implement maximum refresh time and/or maximum refresh uses.

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=662f2bb5f78d66a07443e259bfb59a7d17e119ee

The following commit(s) were added to refs/heads/main by this push:
     new 662f2bb  JOIDC-152 - Implement maximum refresh time and/or maximum refresh uses.
662f2bb is described below

commit 662f2bb5f78d66a07443e259bfb59a7d17e119ee
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Apr 28 18:11:45 2023 +0300

    JOIDC-152 - Implement maximum refresh time and/or maximum refresh uses.
    
    https://shibboleth.atlassian.net/browse/JOIDC-152
    
    Removed refreshTokenLifetime and brought refreshTokenTimeout and
    refreshTokenChainLifetime with default properties
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 6c7a239..868b6f4 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -46,7 +46,8 @@
         p:iDTokenLifetime="%{idp.oidc.idToken.defaultLifetime:PT1H}"
         p:accessTokenType="%{idp.oauth2.accessToken.type:}"
         p:accessTokenLifetime="%{idp.oidc.accessToken.defaultLifetime:PT10M}"
-        p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
+        p:refreshTokenTimeout="%{idp.oidc.refreshToken.defaultTimeout:PT2H}"
+        p:refreshTokenChainLifetime="%{idp.oidc.refreshToken.defaultChainLifetime:PT2H}"
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"        
         p:tokenEndpointAuthMethod="%{idp.oidc.rp.client.authenticationMethod:client_secret_basic}"
         p:clientId="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.oidc.rp.client.clientId:}'}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.