[java-idp-plugin-oidc-config] branch main updated: Revert 'authn' property prefix change

Phil Smart philip.smart at jisc.ac.uk
Fri May 5 16:33:11 UTC 2023


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=9bee80bf8b28be8c71cf67eca50e427f421d603f

The following commit(s) were added to refs/heads/main by this push:
     new 9bee80b  Revert 'authn' property prefix change
9bee80b is described below

commit 9bee80bf8b28be8c71cf67eca50e427f421d603f
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri May 5 17:33:08 2023 +0100

    Revert 'authn' property prefix change
---
 .../idp/service/relying-party/postconfig.xml         | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index b2b2f80..37bdeef 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -49,9 +49,9 @@
         p:refreshTokenTimeout="%{idp.oidc.refreshToken.defaultTimeout:%{idp.oidc.refreshToken.defaultLifetime:PT2H}}"
         p:refreshTokenChainLifetime="%{idp.oidc.refreshToken.defaultChainLifetime:PT2H}"
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"        
-        p:tokenEndpointAuthMethod="%{idp.oidc.rp.client.authenticationMethod:client_secret_basic}"
-        p:clientId="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.oidc.rp.client.clientId:}'}"
-        p:clientCredential="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
+        p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
+        p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
+        p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
 
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        
@@ -59,16 +59,16 @@
         p:encodeConsentInTokens="%{idp.oidc.encodeConsentInTokens:false}"
         p:encodedAttributes="%{idp.oidc.encodedAttributes:%{idp.oidc.embeddedAttributes:}}"
         p:deniedUserInfoAttributes="%{idp.oidc.deniedUserInfoAttributes:}"        
-        p:httpRequestMethod="%{idp.oidc.rp.httpRequestMethod:GET}"       
-        p:retrieveUserInfoEndpointClaims="%{idp.oidc.rp.client.userinfo.enabled:true}"        
-        p:redirectUriOverride="%{idp.oidc.rp.client.redirectURI:#{null}}"
+        p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"       
+        p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"        
+        p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
         p:encryptRequestObject="%{idp.oidc.requestobject.encrypted:false}"
         p:signRequestObject="%{idp.oidc.requestobject.signed:true}"
         p:useRequestObject="%{idp.oidc.requestobject.used:false}"
-        p:responseMode="%{idp.oidc.rp.client.responseMode:#{null}}"
-        p:tlsServerValidationSufficient="%{idp.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
-        p:userInfoHttpRequestMethod="%{idp.oidc.rp.client.userinfo.httpRequestMethod:GET}"
-        p:scopes="%{idp.oidc.rp.client.scopes:#{null}}">
+        p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
+        p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
+        p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"
+        p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
         <property name="forceAuthnPredicate">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list