[java-idp-plugin-duo] branch dev/JDUO-80 updated: Wire in default passwordless beans and properties.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch dev/JDUO-80
in repository java-idp-plugin-duo.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commit;h=897b220bffac74bddfb7b694927b9256452845c4

The following commit(s) were added to refs/heads/dev/JDUO-80 by this push:
     new 897b220b Wire in default passwordless beans and properties.
897b220b is described below

commit 897b220bffac74bddfb7b694927b9256452845c4
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Thu Dec 28 15:01:38 2023 -0500

    Wire in default passwordless beans and properties.
---
 .../idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml   | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml b/idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml
index e8ef4825..7e0f6023 100644
--- a/idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml
+++ b/idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml
@@ -31,8 +31,20 @@
     <bean id="shibboleth.authn.DuoOIDC.DuoIntegrationStrategy" parent="shibboleth.Functions.Constant"
         c:target-ref="shibboleth.authn.DuoOIDC.DuoIntegration" />
 
-    <!-- Default strategy for passwordless integration. -->
-    <bean id="shibboleth.authn.DuoOIDC.PasswordlessDuoIntegrationStrategy" parent="shibboleth.Functions.Constant"
+    <!-- Default passwordless integration. -->
+    <bean id="shibboleth.authn.DuoOIDC.Passwordless.DuoIntegration" lazy-init="false"
+        class="net.shibboleth.idp.plugin.authn.duo.DefaultDuoOIDCIntegration"
+        p:passwordless="true"
+        p:APIHost="%{idp.duo.oidc.passwordless.apiHost:%{idp.duo.oidc.apiHost:none}}"
+        p:clientId="%{idp.duo.oidc.passwordless.clientId:%{idp.duo.oidc.clientId:none}}"
+        p:secretKey="%{idp.duo.oidc.passwordless.secretKey:%{idp.duo.oidc.secretKey:none}}"
+        p:registeredRedirectURI="%{idp.duo.oidc.passwordless.redirectURL:%{idp.duo.oidc.redirectURL:}}"
+        p:healthCheckEndpoint="%{idp.duo.oidc.passwordless.endpoint.health:%{idp.duo.oidc.endpoint.health:/oauth/v1/health_check}}"
+        p:tokenEndpoint="%{idp.duo.oidc.passwordless.endpoint.token:%{idp.duo.oidc.endpoint.token:/oauth/v1/token}}"
+        p:authorizeEndpoint="%{idp.duo.oidc.passwordless.endpoint.authorize:%{idp.duo.oidc.endpoint.authorize:/oauth/v1/authorize}}"
+        p:allowedOrigins="%{idp.duo.oidc.passwordless.redirecturl.allowedOrigins:%{idp.duo.oidc.redirecturl.allowedOrigins:}}"
+        p:allowedFactors="#{{ 'Platform authenticator (2fa)', 'Roaming authenticator (2fa)' }}" />
+    <bean id="shibboleth.authn.DuoOIDC.Passwordless.DuoIntegrationStrategy" parent="shibboleth.Functions.Constant"
         c:target="#{getObject('shibboleth.authn.DuoOIDC.PasswordlessDuoIntegration')}" />
 
     <!-- Default "optional" non-browser integration. -->
@@ -121,7 +133,7 @@
         class="net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext"
         p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
         p:standardDuoIntegrationLookupStrategy-ref="shibboleth.authn.DuoOIDC.DuoIntegrationStrategy"
-        p:passwordlessDuoIntegrationLookupStrategy-ref="shibboleth.authn.DuoOIDC.PasswordlessDuoIntegrationStrategy"
+        p:passwordlessDuoIntegrationLookupStrategy-ref="shibboleth.authn.DuoOIDC.Passwordless.DuoIntegrationStrategy"
         p:redirectURICreationStrategy-ref="shibboleth.authn.DuoOIDC.RedirectURICreationStrategy"
         p:usernameLookupStrategy-ref="shibboleth.authn.DuoOIDC.UsernameLookupStrategy"
         p:clientRegistry-ref="shibboleth.authn.DuoOIDC.clientRegistry" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.