[java-oidc-common] branch main updated: JCOMOIDC-48 - Move OIDC.SSO profile bean to commons
Phil Smart
philip.smart at jisc.ac.uk
Fri Feb 10 09:11:02 UTC 2023
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-oidc-common.
View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=b4a47426a8bd08c7073f0a2d9a9c22ec50189070
The following commit(s) were added to refs/heads/main by this push:
new b4a4742 JCOMOIDC-48 - Move OIDC.SSO profile bean to commons
b4a4742 is described below
commit b4a47426a8bd08c7073f0a2d9a9c22ec50189070
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Feb 10 09:10:57 2023 +0000
JCOMOIDC-48 - Move OIDC.SSO profile bean to commons
- Move all the beans *out* of commons and into
java-idp-plugin-oidc-config
https://shibboleth.atlassian.net/browse/JCOMOIDC-48
---
.../META-INF/net.shibboleth.idp/postconfig.xml | 28 --
.../idp/service/attribute/registry/postconfig.xml | 25 --
.../idp/service/relying-party/postconfig.xml | 332 ---------------------
3 files changed, 385 deletions(-)
diff --git a/oidc-common-profile-api/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/oidc-common-profile-api/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
deleted file mode 100644
index 245a048..0000000
--- a/oidc-common-profile-api/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ /dev/null
@@ -1,28 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<beans xmlns="http://www.springframework.org/schema/beans"
- xmlns:context="http://www.springframework.org/schema/context"
- xmlns:util="http://www.springframework.org/schema/util" xmlns:p="http://www.springframework.org/schema/p"
- xmlns:c="http://www.springframework.org/schema/c" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
- http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
- http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
-
- default-init-method="initialize" default-destroy-method="destroy">
-
- <!-- Generic OIDC System beans needed for OIDC based extensions to function, loaded after global.xml. -->
-
- <!-- Credential bean factories -->
- <bean id="shibboleth.oidc.ClientSecretCredential" abstract="true"
- class="net.shibboleth.oidc.security.credential.impl.BasicClientSecretCredentialFactoryBean" />
-
- <bean id="shibboleth.oidc.JWKCredential" abstract="true"
- class="net.shibboleth.oidc.security.credential.impl.BasicJWKCredentialFactoryBean" />
-
- <!-- Singleton JWK cache -->
- <bean id="shibboleth.oidc.RemoteJwkSetCache"
- class="net.shibboleth.oidc.jwk.RemoteJwkSetCache"
- p:storage-ref="#{'%{idp.oidc.jwk.StorageService:shibboleth.StorageService}'.trim()}"
- p:httpClient="#{getObject('shibboleth.oidc.NonBrowser.HttpClient') ?: getObject('shibboleth.InternalHttpClient')}"
- p:httpClientSecurityParameters="#{getObject('shibboleth.oidc.NonBrowser.HttpClientSecurityParameters')}" />
-
-</beans>
\ No newline at end of file
diff --git a/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/attribute/registry/postconfig.xml b/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/attribute/registry/postconfig.xml
deleted file mode 100644
index 75ffe22..0000000
--- a/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/attribute/registry/postconfig.xml
+++ /dev/null
@@ -1,25 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<beans xmlns="http://www.springframework.org/schema/beans"
- xmlns:context="http://www.springframework.org/schema/context"
- xmlns:util="http://www.springframework.org/schema/util"
- xmlns:p="http://www.springframework.org/schema/p"
- xmlns:c="http://www.springframework.org/schema/c"
- xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
- http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
- http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
-
- default-init-method="initialize" default-destroy-method="destroy">
-
- <!-- Necessary for encoder parsing and claims mapping to function. -->
-
- <bean id="OIDCByteTranscoder"
- class="net.shibboleth.oidc.attribute.transcoding.impl.OIDCByteAttributeTranscoder" />
-
- <bean id="OIDCStringTranscoder"
- class="net.shibboleth.oidc.attribute.transcoding.impl.OIDCStringAttributeTranscoder" />
-
- <bean id="OIDCScopedStringTranscoder"
- class="net.shibboleth.oidc.attribute.transcoding.impl.OIDCScopedStringAttributeTranscoder" />
-
-</beans>
diff --git a/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
deleted file mode 100644
index 289de0f..0000000
--- a/oidc-common-profile-api/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ /dev/null
@@ -1,332 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<beans xmlns="http://www.springframework.org/schema/beans"
- xmlns:context="http://www.springframework.org/schema/context"
- xmlns:util="http://www.springframework.org/schema/util" xmlns:p="http://www.springframework.org/schema/p"
- xmlns:c="http://www.springframework.org/schema/c" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
- xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
- http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd
- http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd"
-
- default-init-method="initialize" default-destroy-method="destroy">
-
- <!--
- Security Configuration Defaults. These settings establish the default security configurations for
- signatures and loads the default credentials used.
- -->
- <bean id="shibboleth.oidc.BasicSignatureValidationConfiguration" abstract="true"
- class="net.shibboleth.oidc.security.jose.impl.BasicSignatureValidationConfiguration"
- p:includedAlgorithms="#{getObject('shibboleth.oidc.IncludedSignatureAlgorithms')}"
- p:excludedAlgorithms="#{getObject('shibboleth.oidc.ExcludedSignatureAlgorithms')}" />
-
- <bean id="shibboleth.oidc.BasicSignatureSigningConfiguration" abstract="true"
- class="net.shibboleth.oidc.security.jose.impl.BasicSignatureSigningConfiguration"
- p:includedAlgorithms="#{getObject('shibboleth.oidc.IncludedSignatureAlgorithms')}"
- p:excludedAlgorithms="#{getObject('shibboleth.oidc.ExcludedSignatureAlgorithms')}" />
-
- <bean id="shibboleth.oidc.BasicEncryptionConfiguration" abstract="true"
- class="net.shibboleth.oidc.security.jose.impl.BasicEncryptionConfiguration"
- p:includedAlgorithms="#{getObject('shibboleth.oidc.IncludedEncryptionAlgorithms')}"
- p:excludedAlgorithms="#{getObject('shibboleth.oidc.ExcludedEncryptionAlgorithms')}" />
-
- <bean id="shibboleth.oidc.BasicDecryptionConfiguration" abstract="true"
- class="net.shibboleth.oidc.security.jose.impl.BasicDecryptionConfiguration"
- p:includedAlgorithms="#{getObject('shibboleth.oidc.IncludedEncryptionAlgorithms')}"
- p:excludedAlgorithms="#{getObject('shibboleth.oidc.ExcludedEncryptionAlgorithms')}" />
-
- <bean id="AbstractOIDCProfile" abstract="true"
- p:securityConfiguration-ref="%{idp.security.oidc.config:shibboleth.oidc.DefaultSecurityConfiguration}" />
-
-<!-- p:claimsValidator-ref="DefaultJWTClaimsValidator" -->
- <bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true"
- p:issuer="#{getObject('shibboleth.oidc.issuer')}"
- p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_poster,client_secret_jwt,private_key_jwt}"
- p:claimsValidator="#{getObject('shibboleth.oidc.DefaultJWTClaimsValidator')}"
- p:encryptionOptional="%{idp.oidc.encryptionOptional:true}"
- p:forcePKCE="%{idp.oidc.forcePKCE:false}"
- p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}"
- p:iDTokenLifetime="%{idp.oidc.idToken.defaultLifetime:PT1H}"
- p:accessTokenType="%{idp.oauth2.accessToken.type:}"
- p:accessTokenLifetime="%{idp.oidc.accessToken.defaultLifetime:PT10M}"
- p:refreshTokenLifetime="%{idp.oidc.refreshToken.defaultLifetime:PT2H}"
- p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"
- p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
- p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
- p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
- p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
-
- <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
- class="net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration"
- p:authorizeCodeLifetime="%{idp.oidc.authorizeCode.defaultLifetime:PT5M}"
- p:encodeConsentInTokens="%{idp.oidc.encodeConsentInTokens:false}"
- p:encodedAttributes="%{idp.oidc.encodedAttributes:%{idp.oidc.embeddedAttributes:}}"
- p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}"
- p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"
- p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"
- p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
- p:encryptRequestObject="%{idp.authn.oidc.rp.client.requestobject.encrypted:false}"
- p:signRequestObject="%{idp.authn.oidc.rp.client.requestobject.signed:true}"
- p:useRequestObject="%{idp.authn.oidc.rp.client.requestobject.supported:false}"
- p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
- <property name="forceAuthnPredicate">
- <bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
- </property>
- <property name="defaultAuthenticationMethodsLookupStrategy">
- <bean
- class="net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassRequestLookupFunction"
- p:mappings="#{getObject('shibboleth.oidc.PrincipalProxyRequestMappings')}" />
- </property>
- <property name="authenticationContextClassReferenceTranslationStrategyLookupStrategy">
- <bean
- class="net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction$LookupFunctionWrapper">
- <constructor-arg>
- <bean class="net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction"
- c:mappings="#{getObject('shibboleth.oidc.PrincipalProxyResponseMappings')}"/>
- </constructor-arg>
- </bean>
- </property>
- <property name="authenticationMethodsReferencesTranslationStrategyLookupStrategy">
- <bean
- class="net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction$LookupFunctionWrapper">
- <constructor-arg>
- <bean class="net.shibboleth.oidc.profile.config.navigate.ProxyAwareDefaultOIDCAuthenticationContextClassResponseLookupFunction"
- c:mappings="#{getObject('shibboleth.oidc.PrincipalProxyResponseMappings')}"/>
- </constructor-arg>
- </bean>
- </property>
- </bean>
-
- <!-- Keyset profile -->
- <bean id="OIDC.Keyset" parent="AbstractOIDCProfile" lazy-init="true"
- class="net.shibboleth.oidc.profile.config.OIDCPublishKeySetConfiguration"
- p:securityConfiguration-ref="shibboleth.oidc.PublishKeySetSecurityConfiguration" />
-
- <!-- Configuration for publishing key set. -->
- <bean id="shibboleth.oidc.PublishKeySetSecurityConfiguration"
- class="net.shibboleth.oidc.profile.config.JSONSecurityConfiguration">
- <property name="jwtSignatureSigningConfiguration">
- <ref bean="shibboleth.oidc.PublishKeySetSigningConfiguration" />
- </property>
- <property name="jwtDecryptionConfiguration">
- <ref bean="shibboleth.oidc.PublishKeySetDecryptionConfiguration" />
- </property>
- </bean>
-
- <!-- Signing keys to publish. -->
- <bean id="shibboleth.oidc.PublishKeySetSigningConfiguration"
- parent="shibboleth.oidc.BasicSignatureSigningConfiguration"
- p:signingCredentials="#{getObject('shibboleth.oidc.SigningCredentialsToPublish') ?: getObject('shibboleth.oidc.SigningCredentialsFactory')}"/>
-
- <!-- Encryption keys to publish. -->
- <bean id="shibboleth.oidc.PublishKeySetDecryptionConfiguration"
- parent="shibboleth.oidc.BasicDecryptionConfiguration">
- <property name="KEKCredentialResolver">
- <bean id="defaultOIDCKeyDecryptionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ReturnAllCollectionJOSEObjectCredentialResolver"
- c:credentials="#{getObject('shibboleth.oidc.EncryptionCredentialsToPublish') ?: getObject('shibboleth.oidc.EncryptionCredentialsToPublishFactory')}"/>
- </property>
- </bean>
-
- <bean id="shibboleth.oidc.EncryptionCredentialsToPublishFactory"
- class="net.shibboleth.oidc.profile.config.CredentialsListFactory"
- c:_0="#{getObject('shibboleth.oidc.EncryptionCredentials')}" />
-
-
- <bean id="shibboleth.oidc.DefaultSecurityConfiguration"
- class="net.shibboleth.oidc.profile.config.JSONSecurityConfiguration">
- <property name="jwtSignatureSigningConfiguration">
- <ref bean="#{'%{idp.oidc.signing.config:shibboleth.oidc.SigningConfiguration}'.trim()}" />
- </property>
- <property name="jwtEncryptionConfiguration">
- <ref bean="#{'%{idp.oidc.encryption.config:shibboleth.oidc.EncryptionConfiguration}'.trim()}" />
- </property>
- <property name="jwtDecryptionConfiguration">
- <ref bean="#{'%{idp.oidc.decryption.config:shibboleth.oidc.DecryptionConfiguration}'.trim()}" />
- </property>
- <property name="jwtSignatureValidationConfiguration">
- <ref bean="#{'%{idp.oidc.validation.config:shibboleth.oidc.SignatureValidationConfiguration}'.trim()}" />
- </property>
- </bean>
-
- <bean id="shibboleth.oidc.SigningConfiguration"
- parent="shibboleth.oidc.BasicSignatureSigningConfiguration"
- p:signingCredentials-ref="shibboleth.oidc.SigningCredentialsFactory">
- <property name="signatureAlgorithms">
- <list>
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_RS_256" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_RS_384" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_RS_512" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_HS_256" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_HS_384" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_HS_512" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_ES_256" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_ES_384" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.SignatureConstants.ALGO_ID_SIGNATURE_ES_512" />
- </list>
- </property>
- </bean>
-
- <bean id="shibboleth.oidc.EncryptionConfiguration" parent="shibboleth.oidc.BasicEncryptionConfiguration"
- p:KEKCredentialResolver-ref="defaultOIDCKeyEncryptionCredentialResolver"
- p:contentEncryptionKeyCredentialResolver-ref="defaultOIDCContentEncryptionKeyCredentialResolver">
- <property name="keyTransportEncryptionAlgorithms">
- <list>
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_RSA_1_5" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_RSA_OAEP" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_RSA_OAEP_256" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_128_KW" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_192_KW" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_256_KW" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_128_GCM_KW" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_192_GCM_KW" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.KeyManagementConstants.ALGO_ID_ALG_AES_256_GCM_KW" />
- </list>
- </property>
- <property name="dataEncryptionAlgorithms">
- <list>
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A128CBC_HS256" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A192CBC_HS384" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A256CBC_HS512" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A128GCM" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A192GCM" />
- <util:constant
- static-field="net.shibboleth.oidc.jwa.support.EncryptionConstants.ALGO_ID_ENC_ALG_A256GCM" />
- </list>
- </property>
- </bean>
-
- <bean id="shibboleth.oidc.SigningCredentialsFactory"
- class="net.shibboleth.oidc.profile.config.CredentialsListFactory"
- c:_0="#{getObject('shibboleth.oidc.SigningCredentials')}" />
-
- <bean id="defaultOIDCKeyEncryptionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver">
- <constructor-arg>
- <list>
- <!-- Used by the OP -->
- <bean id="ClientInformationCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver"
- p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
- p:keyFetchInterval="%{idp.oidc.provider.keyfetch.interval:PT30M}"/>
- <!-- Used by the RP -->
- <bean id="OIDCProviderMetadataCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver"
- p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
- p:keyFetchInterval="%{idp.oidc.provider.keyfetch.interval:PT30M}" />
- <bean id="ClientSecretCriterionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver"/>
- </list>
- </constructor-arg>
- </bean>
-
- <bean id="defaultOIDCContentEncryptionKeyCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver">
- <constructor-arg>
- <list>
- <!-- Used by the OP -->
- <bean id="ClientInformationCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver"
- p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
- p:keyFetchInterval="%{idp.oidc.provider.keyfetch.interval:PT30M}"/>
- <!-- Used by the RP -->
- <bean id="ClientSecretCriterionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver"/>
- </list>
- </constructor-arg>
- </bean>
-
- <bean id="shibboleth.oidc.DecryptionConfiguration"
- parent="shibboleth.oidc.BasicDecryptionConfiguration"
- p:KEKCredentialResolver-ref="defaultOIDCKeyDecryptionCredentialResolver"
- p:contentEncryptionKeyCredentialResolver-ref="defaultOIDCContentDecryptionKeyCredentialResolver">
- </bean>
-
- <!--
- A resolver to public/private key encryption keys global to the RP
- -->
- <bean id="defaultOIDCKeyDecryptionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver">
- <constructor-arg>
- <list>
- <bean class="net.shibboleth.oidc.security.credential.impl.LocalJOSEObjectCredentialResolver">
- <constructor-arg name="localCredentialResolver">
- <bean
- class="net.shibboleth.oidc.security.credential.impl.CollectionJOSEObjectCredentialResolver"
- c:credentials-ref="shibboleth.oidc.EncryptionCredentials" />
- </constructor-arg>
- </bean>
- <bean id="CriterionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver"/>
- </list>
- </constructor-arg>
- </bean>
-
- <bean id="defaultOIDCContentDecryptionKeyCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver">
- <constructor-arg>
- <list>
- <bean id="CriterionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver"/>
- </list>
- </constructor-arg>
- </bean>
-
- <bean id="shibboleth.oidc.SignatureValidationConfiguration"
- parent="shibboleth.oidc.BasicSignatureValidationConfiguration"
- p:signatureTrustEngine-ref="ExplicitKeySignedJWTTrustEngine"/>
-
-
- <bean id="ExplicitKeySignedJWTTrustEngine"
- class="net.shibboleth.oidc.security.impl.ExplicitKeySignedJWTTrustEngine"
- c:resolver-ref="defaultSignedJWTTrustedCredentialResolver"
- c:JOSEObjectResolver-ref="defaultSignedJWTJOSEHeaderCredentialResolver" />
-
- <!-- A resolver for resolving 'untrusted' credentials out of the JOSE header of JWTs -->
- <bean id="defaultSignedJWTJOSEHeaderCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.BasicJOSEObjectCredentialResolver" />
-
- <!-- A resolver for resolving trusted credentials to match against those resolved from the JWT -->
- <bean id="defaultSignedJWTTrustedCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ChainingJOSEObjectCredentialResolver">
- <constructor-arg>
- <list>
- <!-- Used by the OP -->
- <bean id="ClientInformationCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientInformationCredentialResolver"
- p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
- p:keyFetchInterval="%{idp.oidc.provider.keyfetch.interval:PT30M}"/>
- <!-- Used by the RP -->
- <bean id="OIDCProviderMetadataCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ProviderMetadataCredentialResolver"
- p:remoteJwkSetCache-ref="shibboleth.oidc.RemoteJwkSetCache"
- p:keyFetchInterval="%{idp.oidc.provider.keyfetch.interval:PT30M}"/>
- <bean id="CriterionCredentialResolver"
- class="net.shibboleth.oidc.security.credential.impl.ClientSecretCriterionCredentialResolver"/>
- </list>
- </constructor-arg>
- </bean>
-
-
-</beans>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list