[java-idp-plugin-oidc-config] branch main updated: JOIDC-158 - client_secret_post method is not anymore enabled by default

Henri Mikkonen henri.mikkonen at iki.fi
Tue May 16 10:28:19 UTC 2023


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=4f878fea21bae63978914e35e0533aeed035500b

The following commit(s) were added to refs/heads/main by this push:
     new 4f878fe  JOIDC-158 - client_secret_post method is not anymore enabled by default
4f878fe is described below

commit 4f878fea21bae63978914e35e0533aeed035500b
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue May 16 13:27:30 2023 +0300

    JOIDC-158 - client_secret_post method is not anymore enabled by default
    
    https://shibboleth.atlassian.net/browse/JOIDC-158
    
    Fixed the typo in the default values for 'idp.oidc.tokenEndpointAuthMethods'.'
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 37bdeef..3ffd69d 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -38,7 +38,7 @@
 
     <bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true" 
         p:issuer="#{getObject('shibboleth.oidc.issuer')}"        
-        p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_poster,client_secret_jwt,private_key_jwt}"
+        p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
         p:claimsValidator="#{getObject('shibboleth.oidc.DefaultJWTClaimsValidator')}"
         p:encryptionOptional="%{idp.oidc.encryptionOptional:true}"
         p:forcePKCE="%{idp.oidc.forcePKCE:false}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list