[java-idp-plugin-oidc-config] branch main updated: JOIDC-158 - client_secret_post method is not anymore enabled by default
Henri Mikkonen
henri.mikkonen at iki.fi
Tue May 16 10:28:19 UTC 2023
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=4f878fea21bae63978914e35e0533aeed035500b
The following commit(s) were added to refs/heads/main by this push:
new 4f878fe JOIDC-158 - client_secret_post method is not anymore enabled by default
4f878fe is described below
commit 4f878fea21bae63978914e35e0533aeed035500b
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue May 16 13:27:30 2023 +0300
JOIDC-158 - client_secret_post method is not anymore enabled by default
https://shibboleth.atlassian.net/browse/JOIDC-158
Fixed the typo in the default values for 'idp.oidc.tokenEndpointAuthMethods'.'
---
.../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 37bdeef..3ffd69d 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -38,7 +38,7 @@
<bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true"
p:issuer="#{getObject('shibboleth.oidc.issuer')}"
- p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_poster,client_secret_jwt,private_key_jwt}"
+ p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
p:claimsValidator="#{getObject('shibboleth.oidc.DefaultJWTClaimsValidator')}"
p:encryptionOptional="%{idp.oidc.encryptionOptional:true}"
p:forcePKCE="%{idp.oidc.forcePKCE:false}"
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list