[java-idp-plugin-oidc-rp] branch main updated: Revert 'authn' property prefix change
Phil Smart
philip.smart at jisc.ac.uk
Fri May 5 16:35:01 UTC 2023
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=8b52a7fb666c427727a37c99c7902ce6143be630
The following commit(s) were added to refs/heads/main by this push:
new 8b52a7f Revert 'authn' property prefix change
8b52a7f is described below
commit 8b52a7fb666c427727a37c99c7902ce6143be630
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri May 5 17:34:59 2023 +0100
Revert 'authn' property prefix change
---
.../oidc/rp/impl/AuthorizationController.java | 2 +-
.../META-INF/net.shibboleth.idp/postconfig.xml | 26 ++++++-------
.../oidc-relying-party-authn-beans.xml | 12 +++---
.../oidc-subject-identifier-c14n-beans.xml | 6 +--
.../authn/oidc-rp-client-secret-credential.xml | 2 +-
.../authn/oidc/rp/conf/authn/oidc-rp.properties | 44 +++++++++++-----------
.../OIDCRPFlowFromAuthenticationResponseTest.java | 2 +-
.../oidc/rp/impl/OIDCRPFlowPreRedirectTest.java | 12 +++---
.../plugin/authn/oidc/rp/impl/OIDCRPFlowTest.java | 8 ++--
.../resources/conf/authn/test-oidc-credentials.xml | 2 +-
.../conf/test-relying-party-postconfig.xml | 22 +++++------
pom.xml | 2 +-
12 files changed, 70 insertions(+), 70 deletions(-)
diff --git a/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/AuthorizationController.java b/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/AuthorizationController.java
index 132a8ed..49e7c9a 100644
--- a/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/AuthorizationController.java
+++ b/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/AuthorizationController.java
@@ -66,7 +66,7 @@ import net.shibboleth.utilities.java.support.logic.Constraint;
*/
@ThreadSafe
@Controller
- at RequestMapping("%{idp.oidc.rp.externalAuthnPath:/Authn/OIDC/RP}")
+ at RequestMapping("%{idp.authn.oidc.rp.externalAuthnPath:/Authn/OIDC/RP}")
public class AuthorizationController extends AbstractInitializableComponent {
/** The final part of the IdP URL path which is called to begin authorization.*/
diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 355896e..068a651 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -198,19 +198,19 @@
<!-- The authentication flow descriptor -->
<bean id="authn/OIDCRelyingParty" parent="shibboleth.AuthenticationFlow"
- p:order="%{idp.oidc.rp.order:1000}" p:nonBrowserSupported="%{idp.oidc.rp.nonBrowserSupported:true}"
- p:passiveAuthenticationSupported="%{idp.oidc.rp.passiveAuthenticationSupported:true}"
- p:forcedAuthenticationSupported="%{idp.oidc.rp.forcedAuthenticationSupported:true}"
- p:proxyRestrictionsEnforced="%{idp.oidc.rp.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
- p:proxyScopingEnforced="%{idp.oidc.rp.proxyScopingEnforced:false}"
- p:discoveryRequired="%{idp.oidc.rp.discoveryRequired:false}"
- p:lifetime="%{idp.oidc.rp.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
- p:inactivityTimeout="%{idp.oidc.rp.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
- p:reuseCondition-ref="#{'%{idp.oidc.rp.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
- p:activationCondition-ref="#{'%{idp.oidc.rp.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
+ p:order="%{idp.authn.oidc.rp.order:1000}" p:nonBrowserSupported="%{idp.authn.oidc.rp.nonBrowserSupported:true}"
+ p:passiveAuthenticationSupported="%{idp.authn.oidc.rp.passiveAuthenticationSupported:true}"
+ p:forcedAuthenticationSupported="%{idp.authn.oidc.rp.forcedAuthenticationSupported:true}"
+ p:proxyRestrictionsEnforced="%{idp.authn.oidc.rp.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
+ p:proxyScopingEnforced="%{idp.authn.oidc.rp.proxyScopingEnforced:false}"
+ p:discoveryRequired="%{idp.authn.oidc.rp.provider.discoveryRequired:false}"
+ p:lifetime="%{idp.authn.oidc.rp.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
+ p:inactivityTimeout="%{idp.authn.oidc.rp.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
+ p:reuseCondition-ref="#{'%{idp.authn.oidc.rp.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
+ p:activationCondition-ref="#{'%{idp.authn.oidc.rp.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
<property name="supportedPrincipalsByString">
<bean parent="shibboleth.CommaDelimStringArray"
- c:_0="#{'%{idp.oidc.rp.supportedPrincipals:}'.trim()}" />
+ c:_0="#{'%{idp.authn.oidc.rp.supportedPrincipals:}'.trim()}" />
</property>
</bean>
@@ -220,7 +220,7 @@
class="net.shibboleth.idp.authn.SubjectCanonicalizationFlowDescriptor" >
<property name="activationCondition">
<bean class="net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization.ActivationCondition"
- c:disabled="%{idp.oidc.rp.c14n.subjectidentifier.disabled:false}"/>
+ c:disabled="%{idp.authn.oidc.rp.c14n.subjectidentifier.disabled:false}"/>
</property>
</bean>
@@ -233,7 +233,7 @@
<!-- Controller implementation to handle authorization request -->
<bean id="shibboleth.authn.OIDC.externalServletPath" class="java.lang.String"
- c:_0="%{idp.oidc.rp.externalAuthnPath:/Authn/OIDC/RP}">
+ c:_0="%{idp.authn.oidc.rp.externalAuthnPath:/Authn/OIDC/RP}">
</bean>
<!-- location of the OIDC servlet authorization endpoint relative to the servlet -->
diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
index 93b5970..d0552c3 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
@@ -19,7 +19,7 @@
<!-- Initial discovery step -->
<bean id="PropertyDrivenDiscovery" parent="shibboleth.Functions.Constant"
- c:target="#{'%{idp.oidc.rp.provider.proxyIssuer:}'.trim()}" />
+ c:target="#{'%{idp.authn.oidc.rp.provider.proxyIssuer:}'.trim()}" />
<!-- Parent beans for indirecting into nested PRC. -->
@@ -304,7 +304,7 @@
<bean id="DefaultRedirectUriCreationStrategy" scope="prototype"
p:callbackServletPath="#{getObject('shibboleth.authn.OIDC.externalServletPath')}/callback"
- p:allowedOrigins="%{idp.oidc.rp.client.redirecturl.allowedOrigins:}"
+ p:allowedOrigins="%{idp.authn.oidc.rp.client.redirecturl.allowedOrigins:}"
class="net.shibboleth.idp.plugin.authn.oidc.rp.impl.DefaultRedirectUriCreationFunction" />
<!-- Message Decoding -->
@@ -590,7 +590,7 @@
c:type="#{ T(net.shibboleth.oidc.profile.messaging.context.OIDCPeerEntityContext) }" />
<bean id="AtHashValidator" class="net.shibboleth.oidc.security.jwt.claims.impl.AccessTokenHashValidator"
- p:allowMissing="%{idp.oidc.rp.client.tokenresponse.allowMissingAtHash:true}"
+ p:allowMissing="%{idp.authn.oidc.rp.client.tokenresponse.allowMissingAtHash:true}"
p:accessTokenLookupStrategy="#{getObject('shibboleth.authn.oidc.rp.jwt.AccessTokenLookupStrategy') ?:
getObject('DefaultAccessTokenLookupStrategy')}"
p:joseHeaderLookupStrategy="#{getObject('shibboleth.authn.oidc.rp.jwt.IDTokenJOSEHeaderLookupStrategy') ?:
@@ -606,13 +606,13 @@
class="net.shibboleth.oidc.security.jwt.claims.impl.AuthenticationTimeClaimsValidator"
p:authnLifetimeLookupStrategy-ref="MaxAgeLookupFunction"
p:authnRequestTimeLookupStrategy-ref="AuthenticationRequestTimeLookupFunction"
- p:clockSkew="%{idp.oidc.rp.client.idtoken.jwt.verifier.clockSkew:PT60S}"
+ p:clockSkew="%{idp.authn.oidc.rp.client.idtoken.jwt.verifier.clockSkew:PT60S}"
p:activationCondition="#{getObject('shibboleth.authn.oidc.rp.jwt.AuthTimeActivationCondition') ?:
getObject('DefaultAuthTimeActivationCondition')}"/>
<bean id="MaxAgeLookupFunction" scope="prototype"
class="net.shibboleth.idp.plugin.authn.oidc.rp.config.navigate.MaxAgeLookupFunction"
- c:maxAgeDefault="%{idp.oidc.rp.client.idtoken.jwt.verifier.authnLifetime:PT60S}"/>
+ c:maxAgeDefault="%{idp.authn.oidc.rp.client.idtoken.jwt.verifier.authnLifetime:PT60S}"/>
<bean id="AuthenticationRequestTimeLookupFunction"
class="net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction"/>
@@ -810,7 +810,7 @@
class="net.shibboleth.idp.plugin.authn.oidc.rp.impl.ValidateOIDCAuthentication" scope="prototype"
p:profileContextLookupStrategy-ref="shibboleth.ChildLookup.ProxyProfileRequestContext"
p:authenticationContextLookupStrategy-ref="ParentAuthenticiationContextLookup"
- p:addDefaultPrincipals="#{getObject('idp.oidc.rp.supportedPrincipals.addDefaultPrincipals') ?: %{idp.oidc.rp.addDefaultPrincipals:false}}"
+ p:addDefaultPrincipals="#{getObject('idp.authn.oidc.rp.supportedPrincipals.addDefaultPrincipals') ?: %{idp.authn.oidc.rp.addDefaultPrincipals:false}}"
p:responderLookupStrategy-ref="shibboleth.RelyingPartyIdLookup.Simple"
p:requesterLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple"
p:cleanupHook="#{getObject('shibboleth.authn.oidc.rp.CleanUpHook')}"
diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/c14n/OIDCSubjectIdentifier/oidc-subject-identifier-c14n-beans.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/c14n/OIDCSubjectIdentifier/oidc-subject-identifier-c14n-beans.xml
index 2924cfd..df39c80 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/c14n/OIDCSubjectIdentifier/oidc-subject-identifier-c14n-beans.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/c14n/OIDCSubjectIdentifier/oidc-subject-identifier-c14n-beans.xml
@@ -20,9 +20,9 @@
<bean id="SimpleOIDCSubjectIdentifierCanonicalization"
class="net.shibboleth.idp.plugin.authn.oidc.rp.impl.SimpleOIDCSubjectIdentifierCanonicalization" scope="prototype"
- p:lowercase="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Lowercase') ?: %{idp.oidc.rp.c14n.subjectidentifier.lowercase:false}}"
- p:uppercase="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Uppercase') ?: %{idp.oidc.rp.c14n.subjectidentifier.uppercas:false}}"
- p:trim="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Trim') ?: %{idp.oidc.rp.c14n.subjectidentifier.trim:true}}"
+ p:lowercase="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Lowercase') ?: %{idp.authn.oidc.rp.c14n.subjectidentifier.lowercase:false}}"
+ p:uppercase="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Uppercase') ?: %{idp.authn.oidc.rp.c14n.subjectidentifier.uppercas:false}}"
+ p:trim="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Trim') ?: %{idp.authn.oidc.rp.c14n.subjectidentifier.trim:true}}"
p:transforms="#{getObject('shibboleth.authn.oidc.rp.c14n.subjectidentifier.Transforms')}" />
</beans>
diff --git a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp-client-secret-credential.xml b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp-client-secret-credential.xml
index 1453228..51558fd 100644
--- a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp-client-secret-credential.xml
+++ b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp-client-secret-credential.xml
@@ -15,6 +15,6 @@
-->
<bean id="shibboleth.authn.oidc.rp.DefaultCredential" parent="shibboleth.oidc.ClientSecretCredential"
- p:secret="%{idp.oidc.rp.client.clientSecret:#{null}}"/>
+ p:secret="%{idp.authn.oidc.rp.client.clientSecret:#{null}}"/>
</beans>
diff --git a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
index 4fa0e0d..ed9b45f 100644
--- a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
+++ b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
@@ -1,49 +1,49 @@
-idp.oidc.rp.provider.proxyIssuer=https://issuer.com
+idp.authn.oidc.rp.provider.proxyIssuer=https://issuer.com
## If discovery is required, these default properties will not be set, you must manage per OP using overrides
-idp.oidc.rp.client.clientId = client_id
-idp.oidc.rp.client.clientSecret= client_secret
-idp.oidc.rp.client.redirecturl.allowedOrigins = https://localhost:8443
+idp.authn.oidc.rp.client.clientId = client_id
+idp.authn.oidc.rp.client.clientSecret= client_secret
+idp.authn.oidc.rp.client.redirecturl.allowedOrigins = https://localhost:8443
## If true and the token was retrieved using TLS with server validation, JWS signature checking will be skipped.
-#idp.oidc.rp.client.idtoken.tlsServerValidationOnly = false
+#idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly = false
## Should a further lookup to the UserInfo endpoint be made, to retrieve additional claims about the end-user
-#idp.oidc.rp.client.userinfo.enabled = true
-#idp.oidc.rp.client.userinfo.httpRequestMethod = GET
+#idp.authn.oidc.rp.client.userinfo.enabled = true
+#idp.authn.oidc.rp.client.userinfo.httpRequestMethod = GET
## Override the default response_mode for the given response_type
-#idp.oidc.rp.client.responseMode = query
+#idp.authn.oidc.rp.client.responseMode = query
## Client authentication method. Currently client_secret_basic and client_secret_post
-#idp.oidc.rp.client.authenticationMethod = client_secret_basic
+#idp.authn.oidc.rp.client.authenticationMethod = client_secret_basic
## Comma seperated list of additional scopes e.g. profile or email. The openid scope is added by default
-#idp.oidc.rp.client.scopes =
+#idp.authn.oidc.rp.client.scopes =
-#idp.oidc.rp.addDefaultPrincipal = false
-#idp.oidc.rp.supportedPrincipals = \
+#idp.authn.oidc.rp.addDefaultPrincipal = false
+#idp.authn.oidc.rp.supportedPrincipals = \
# saml2/urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport, \
# saml2/urn:oasis:names:tc:SAML:2.0:ac:classes:Password, \
# saml1/urn:oasis:names:tc:SAML:1.0:am:password
## JWT verification properties
-#idp.oidc.rp.client.idtoken.jwt.verifier.clockSkew = PT60S
-#idp.oidc.rp.client.idtoken.jwt.verifier.authnLifetime = PT60S
+#idp.authn.oidc.rp.client.idtoken.jwt.verifier.clockSkew = PT60S
+#idp.authn.oidc.rp.client.idtoken.jwt.verifier.authnLifetime = PT60S
## Should validation be skipped if the at_hash is not present in the id_token response. Defaults to 'true' as
## access token at_hash validation is optional in the Authorization Code Flow.
-#idp.oidc.rp.client.tokenresponse.allowMissingAtHash = true
+#idp.authn.oidc.rp.client.tokenresponse.allowMissingAtHash = true
## External controller path. Should not need changing.
-#idp.oidc.rp.externalAuthnPath = /Authn/OIDC/RP
+#idp.authn.oidc.rp.externalAuthnPath = /Authn/OIDC/RP
## Inbuilt C14N options for converting a Subject Identifier into a principal name
-idp.oidc.rp.c14n.subjectidentifier.lowercase = false
-idp.oidc.rp.c14n.subjectidentifier.uppercase = false
-idp.oidc.rp.c14n.subjectidentifier.trim = true
-idp.oidc.rp.c14n.subjectidentifier.disabled = false
+idp.authn.oidc.rp.c14n.subjectidentifier.lowercase = false
+idp.authn.oidc.rp.c14n.subjectidentifier.uppercase = false
+idp.authn.oidc.rp.c14n.subjectidentifier.trim = true
+idp.authn.oidc.rp.c14n.subjectidentifier.disabled = false
## Properties to control discovery. Note, there is currently no default discovery implementation
-#idp.oidc.rp.provider.discoveryRequired=false
-#idp.oidc.rp.discoveryURL=http://opdisco.com
+#idp.authn.oidc.rp.provider.discoveryRequired=false
+#idp.authn.oidc.rp.discoveryURL=http://opdisco.com
### Properties below are common to both RP and OP (if installed).
diff --git a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowFromAuthenticationResponseTest.java b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowFromAuthenticationResponseTest.java
index e9095de..b84bf9b 100644
--- a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowFromAuthenticationResponseTest.java
+++ b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowFromAuthenticationResponseTest.java
@@ -77,7 +77,7 @@ public class OIDCRPFlowFromAuthenticationResponseTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
setMockProperties(mockProperties);
}
diff --git a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowPreRedirectTest.java b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowPreRedirectTest.java
index fd28417..c87402b 100644
--- a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowPreRedirectTest.java
+++ b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowPreRedirectTest.java
@@ -67,7 +67,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
setMockProperties(mockProperties);
@@ -117,7 +117,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE);
setMockProperties(mockProperties);
@@ -169,7 +169,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_ENCRYPT);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_ENCRYPT);
setMockProperties(mockProperties);
@@ -243,7 +243,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_RSA256_SIG);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_RSA256_SIG);
setMockProperties(mockProperties);
@@ -306,7 +306,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_HS512_SIG);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID_REQUESTOBJECT_TRUE_HS512_SIG);
setMockProperties(mockProperties);
@@ -367,7 +367,7 @@ public class OIDCRPFlowPreRedirectTest extends OIDCRPFlowTest {
final Map<String,String> mockProperties = Map.of(
"idp.service.clientinfo.failFast","false",
"idp.entityID", "http://idp.example.com/",
- "idp.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
+ "idp.authn.oidc.rp.provider.proxyIssuer",OP_ISSUER_ID);
setMockProperties(mockProperties);
diff --git a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowTest.java b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowTest.java
index 9fcb9fc..dbde6c2 100644
--- a/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowTest.java
+++ b/idp-oidc-rp-impl/src/test/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/OIDCRPFlowTest.java
@@ -284,8 +284,8 @@ public class OIDCRPFlowTest extends AbstractAuthnXmlFlowExecutionTests {
// So properties for the profile config need to go here.
loadBeanDefinitionsFromXmlFile(builderContext,
new ClassPathResource("conf/test-relyingparty-resolver-service.xml"),
- Map.of("idp.oidc.rp.client.clientId", CLIENT_ID,
- "idp.oidc.rp.client.redirectURI", REDIRECT_URI_OVERRIDE));
+ Map.of("idp.authn.oidc.rp.client.clientId", CLIENT_ID,
+ "idp.authn.oidc.rp.client.redirectURI", REDIRECT_URI_OVERRIDE));
loadBeanDefinitionsFromXmlFile(builderContext,
new ClassPathResource("conf/additional-system-beans.xml"), null);
@@ -299,8 +299,8 @@ public class OIDCRPFlowTest extends AbstractAuthnXmlFlowExecutionTests {
// Add a signing key incase it is used
loadBeanDefinitionsFromXmlFile(builderContext,
new ClassPathResource("conf/authn/test-oidc-credentials.xml"), Map.of(
- "idp.oidc.rp.client.clientId", CLIENT_ID,
- "idp.oidc.rp.client.clientSecret",CLIENT_SECRET,
+ "idp.authn.oidc.rp.client.clientId", CLIENT_ID,
+ "idp.authn.oidc.rp.client.clientSecret",CLIENT_SECRET,
"idp.signing.oidc.rs.key","conf/credentials/idp-signing-rsa.jwk"));
}
diff --git a/idp-oidc-rp-impl/src/test/resources/conf/authn/test-oidc-credentials.xml b/idp-oidc-rp-impl/src/test/resources/conf/authn/test-oidc-credentials.xml
index 03a2673..a88514a 100644
--- a/idp-oidc-rp-impl/src/test/resources/conf/authn/test-oidc-credentials.xml
+++ b/idp-oidc-rp-impl/src/test/resources/conf/authn/test-oidc-credentials.xml
@@ -20,7 +20,7 @@
The default credential is based on the client_secret, and will be the only used credential in most cases.
-->
<bean id="shibboleth.authn.oidc.rp.DefaultCredential" parent="shibboleth.oidc.ClientSecretCredential"
- p:secret="%{idp.oidc.rp.client.clientSecret:#{null}}"/>
+ p:secret="%{idp.authn.oidc.rp.client.clientSecret:#{null}}"/>
<bean id="shibboleth.oidc.DefaultRSSigningCredential" parent="shibboleth.oidc.JWKCredential"
p:resource="%{idp.signing.oidc.rs.key:#{null}}" p:failIfResourceIsNull="false" />
diff --git a/idp-oidc-rp-impl/src/test/resources/conf/test-relying-party-postconfig.xml b/idp-oidc-rp-impl/src/test/resources/conf/test-relying-party-postconfig.xml
index d2433c2..f8c0157 100644
--- a/idp-oidc-rp-impl/src/test/resources/conf/test-relying-party-postconfig.xml
+++ b/idp-oidc-rp-impl/src/test/resources/conf/test-relying-party-postconfig.xml
@@ -46,20 +46,20 @@
p:securityConfiguration-ref="%{idp.security.oidc.config:shibboleth.oidc.DefaultSecurityConfiguration}" />
<bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true"
- p:tokenEndpointAuthMethod="%{idp.oidc.rp.client.authenticationMethod:client_secret_basic}"/>
+ p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"/>
<bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"
- p:httpRequestMethod="%{idp.oidc.rp.httpRequestMethod:GET}"
- p:clientId="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.oidc.rp.client.clientId:}'}"
- p:clientCredential="#{%{idp.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"
- p:responseMode="%{idp.oidc.rp.client.responseMode:#{null}}"
- p:retrieveUserInfoEndpointClaims="%{idp.oidc.rp.client.userinfo.enabled:true}"
- p:redirectUriOverride="%{idp.oidc.rp.client.redirectURI:#{null}}"
- p:encryptRequestObject="%{idp.oidc.requestobject.encrypted:false}"
- p:signRequestObject="%{idp.oidc.requestobject.signed:true}"
- p:useRequestObject="%{idp.oidc.requestobject.used:false}"
- p:scopes="%{idp.oidc.rp.client.scopes:#{null}}">
+ p:httpRequestMethod="%{idp.authn.oidc.rp.httpRequestMethod:GET}"
+ p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
+ p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"
+ p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
+ p:retrieveUserInfoEndpointClaims="%{idp.authn.oidc.rp.client.userinfo.enabled:true}"
+ p:redirectUriOverride="%{idp.authn.oidc.rp.client.redirectURI:#{null}}"
+ p:encryptRequestObject="%{idp.authn.oidc.requestobject.encrypted:false}"
+ p:signRequestObject="%{idp.authn.oidc.requestobject.signed:true}"
+ p:useRequestObject="%{idp.authn.oidc.requestobject.used:false}"
+ p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
<property name="forceAuthnPredicate">
<bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
</property>
diff --git a/pom.xml b/pom.xml
index cf9a127..1c03c2b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -22,7 +22,7 @@
<java-support.version>8.4.0</java-support.version>
<spring-extensions.version>6.3.0</spring-extensions.version>
<oidc.common.version>2.2.0-SNAPSHOT</oidc.common.version>
- <idp.oidc.config.version>0.0.1-SNAPSHOT</idp.oidc.config.version>
+ <idp.oidc.config.version>1.0.0-SNAPSHOT</idp.oidc.config.version>
<okhttp3.mockserver.version>4.9.3</okhttp3.mockserver.version>
<okhttp3.tls.version>4.9.3</okhttp3.tls.version>
<idp.oidc.groupId>net.shibboleth.oidc</idp.oidc.groupId>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list