[JIRA] (JOIDC-155) Documentation lacks clear description of interaction between introspection and audience

[Pierre Sagne (Jira)]

Pierre Sagne ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=712020%3Ab389f93c-082f-42b2-8684-ac3e951ab163 ) *commented* on JOIDC-155 ( https://shibboleth.atlassian.net/browse/JOIDC-155?atlOrigin=eyJpIjoiZTU1Mjg1YmZiYWFkNGVlMGJkM2QwM2U5NjVjNzNhNDAiLCJwIjoiaiJ9 )

Re: Documentation lacks clear description of interaction between introspection and audience ( https://shibboleth.atlassian.net/browse/JOIDC-155?atlOrigin=eyJpIjoiZTU1Mjg1YmZiYWFkNGVlMGJkM2QwM2U5NjVjNzNhNDAiLCJwIjoiaiJ9 )

Ok, sorry for the imprecision : in the authorize call, the parameter in which you have to pass the audience for it to be included in the token is not named “audience”, but “resource”. And it is in this resource parameter that specifying something else than URI throws an exception :

ERROR [net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder:53] - Unable to decode inbound request: Illegal resource parameter: Must be an absolute URI and with no query or fragment: my_introspector_client_id

…

Caused by: com.nimbusds.oauth2.sdk.ParseException: Illegal resource parameter: Must be an absolute URI and with no query or fragment: my_introspector_client_id

From my comprehension, it is this check (which i understand is not trivial to remove, as it is done by nimbusds lib) which forces to use an URI for the clientId as an audience.

( https://shibboleth.atlassian.net/browse/JOIDC-155#add-comment?atlOrigin=eyJpIjoiZTU1Mjg1YmZiYWFkNGVlMGJkM2QwM2U5NjVjNzNhNDAiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/JOIDC-155#add-comment?atlOrigin=eyJpIjoiZTU1Mjg1YmZiYWFkNGVlMGJkM2QwM2U5NjVjNzNhNDAiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:7f918b6 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230505/a3f64d8c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-ca025e54-9124-470f-88a7-0589efa29b76
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230505/a3f64d8c/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-a4086a92-e6c8-4d1e-9bf9-d7b0177f4436
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230505/a3f64d8c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-9fb53850-5562-4e8c-b711-1c343692a2c9
Type: image/png
Size: 296 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230505/a3f64d8c/attachment-0005.png>