[JIRA] (SSPCPP-977) custom (or prefix) AuthnRequest_ID

[Luca Giucastro (Jira)]

Luca Giucastro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=615e95e064ff0100716e61b7 ) *created* an issue

Shibboleth SP - C++ ( https://shibboleth.atlassian.net/browse/SSPCPP?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/SSPCPP-977?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 ) SSPCPP-977 ( https://shibboleth.atlassian.net/browse/SSPCPP-977?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 ) custom (or prefix) AuthnRequest_ID ( https://shibboleth.atlassian.net/browse/SSPCPP-977?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 )

Issue Type: New Feature Assignee: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) Components: Request Processing Created: 09/Jun/23 5:20 AM Priority: Trivial Reporter: Luca Giucastro ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=615e95e064ff0100716e61b7 )

In order to make the AuthnRequest mutually "scooped" (samlp:AuthnRequest_ID= / samlp:Response_InResponseTo), it would be useful to add a parameter to specify a prefix to be passed dynamically via QueryParameters (SessionInitiationCommonQueryParameters ?)

the use case could be for example:
indisputably seal the fact of having used the authenticated session to sign a document, generating an hash of the document on the application side at runtime, and adding it as a prefix of the AuthnRequest_ID

https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2067399756/SessionInitiationCommonQueryParameters

SAML2SessionInitiator.cpp
.......
689 if (requestTemplate || m_requestTemplate) {
690   // Freshen TS and ID.
691   req->setID( nullptr );
692   req->setIssueInstant(time( nullptr ));
693 }
.......

841 XMLCh* genid = SAMLConfig::getConfig().generateIdentifier();
842 req->setID(genid);
843 XMLString::release(&genid);
844 req->setIssueInstant(time( nullptr ));

----------------
example:
842 req->setID(prefixID + '_' + genid);

Thanks for the attention

( https://shibboleth.atlassian.net/browse/SSPCPP-977#add-comment?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/SSPCPP-977#add-comment?atlOrigin=eyJpIjoiYTMyNTMxMTdjNGRmNGE3OThhZjk3ZjA2MmNkNDNlYjYiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:956085d )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230609/78c0c5d2/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-478b38c6-0a60-43f8-9590-b8aa896e6380
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230609/78c0c5d2/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-948efdfa-8fb1-4ceb-8f16-a4c81054071c
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230609/78c0c5d2/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-9e271faf-ae00-46c8-a008-4880a7e59053
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230609/78c0c5d2/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ef260700-b9df-43af-9246-f6af7b78cb33
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230609/78c0c5d2/attachment-0007.png>