[java-idp-plugin-oidc-config] branch main updated: Revert 'authn' property prefix change
Phil Smart
philip.smart at jisc.ac.uk
Fri May 5 16:33:11 UTC 2023
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-config.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=9bee80bf8b28be8c71cf67eca50e427f421d603f
The following commit(s) were added to refs/heads/main by this push:
new 9bee80b Revert 'authn' property prefix change
9bee80b is described below
commit 9bee80bf8b28be8c71cf67eca50e427f421d603f
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri May 5 17:33:08 2023 +0100
Revert 'authn' property prefix change
---
.../idp/service/relying-party/postconfig.xml | 20 ++++++++++----------
1 file changed, 10 insertions(+), 10 deletions(-)
diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index b2b2f80..37bdeef 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -49,9 +49,9 @@
p:refreshTokenTimeout="%{idp.oidc.refreshToken.defaultTimeout:%{idp.oidc.refreshToken.defaultLifetime:PT2H}}"
p:refreshTokenChainLifetime="%{idp.oidc.refreshToken.defaultChainLifetime:PT2H}"
p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"
- p:tokenEndpointAuthMethod="%{idp.oidc.rp.client.authenticationMethod:client_secret_basic}"
- p:clientId="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.oidc.rp.client.clientId:}'}"
- p:clientCredential="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
+ p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
+ p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
+ p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
<bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"
@@ -59,16 +59,16 @@
p:encodeConsentInTokens="%{idp.oidc.encodeConsentInTokens:false}"
p:encodedAttributes="%{idp.oidc.encodedAttributes:%{idp.oidc.embeddedAttributes:}}"
p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}"
- p:httpRequestMethod="%{idp.oidc.rp.httpRequestMethod:GET}"
- p:retrieveUserInfoEndpointClaims="%{idp.oidc.rp.client.userinfo.enabled:true}"
- p:redirectUriOverride="%{idp.oidc.rp.client.redirectURI:#{null}}"
+ p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"
+ p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"
+ p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
p:encryptRequestObject="%{idp.oidc.requestobject.encrypted:false}"
p:signRequestObject="%{idp.oidc.requestobject.signed:true}"
p:useRequestObject="%{idp.oidc.requestobject.used:false}"
- p:responseMode="%{idp.oidc.rp.client.responseMode:#{null}}"
- p:tlsServerValidationSufficient="%{idp.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
- p:userInfoHttpRequestMethod="%{idp.oidc.rp.client.userinfo.httpRequestMethod:GET}"
- p:scopes="%{idp.oidc.rp.client.scopes:#{null}}">
+ p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
+ p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
+ p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"
+ p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
<property name="forceAuthnPredicate">
<bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
</property>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list