[JIRA] (JOIDC-162) The default audit extractor for %fauth causes ClassCastException to be thrown

Henri Mikkonen (Jira) jira at shibboleth.atlassian.net
Tue Jun 6 10:59:06 UTC 2023


Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) *created* an issue

IdP Plugin - OIDC OP ( https://shibboleth.atlassian.net/browse/JOIDC?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/JOIDC-162?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 ) JOIDC-162 ( https://shibboleth.atlassian.net/browse/JOIDC-162?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 ) The default audit extractor for %fauth causes ClassCastException to be thrown ( https://shibboleth.atlassian.net/browse/JOIDC-162?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 3.4.0 Assignee: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd ) Components: Authorization Endpoint Created: 06/Jun/23 6:59 AM Priority: Trivial Reporter: Henri Mikkonen ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1614c4a5-c89e-4edc-9421-990bd6ea85fd )

As a part of https://shibboleth.atlassian.net/browse/JCOMOIDC-38 , some audit extractors were moved to the commons library. Accidentally, the similarly named extractor ( *ForceAuthnAuditExtractor* ) in the library was wired to OP too, even though it wasn’t capable of parsing the Nimbus AuthenticationRequest messages that are used by the OP plugin. It only parsed the OIDCAuthenticationRequest objects that are used by the RP plugin.

If %fauth is included in conf/audit.xml for shibboleth.AuditFormattingMap's Shibboleth-Audit entry, a ClassCastException is now thrown by the authorize-flow.

( https://shibboleth.atlassian.net/browse/JOIDC-162#add-comment?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-162#add-comment?atlOrigin=eyJpIjoiNmQzNjdlZDJmMzk2NDNlZWJlMTczZGU2NjNkOTM2ZmMiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:3b7cdab )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230606/4cc8122d/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-d2a8f020-b7ed-424e-b760-3dc24944d2ad
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230606/4cc8122d/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-d326ff8a-a306-4b7b-a9c4-23213dc78c94
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230606/4cc8122d/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-b2b24318-5f32-4069-8e54-bf28cfeefc14
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230606/4cc8122d/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-9fc0b3aa-2a1f-4bf9-a436-790851b8a4ec
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230606/4cc8122d/attachment-0007.png>


More information about the commits mailing list