[java-idp-plugin-oidc-config] branch main updated: JOIDC-159 - JWT-based client authentication fails for token endpoint when using non-MDDriven config

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=5ff9f5085be172c705c517a3ced53bb6796330c6

The following commit(s) were added to refs/heads/main by this push:
     new 5ff9f50  JOIDC-159 - JWT-based client authentication fails for token endpoint when using non-MDDriven config
5ff9f50 is described below

commit 5ff9f5085be172c705c517a3ced53bb6796330c6
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue May 16 13:29:36 2023 +0300

    JOIDC-159 - JWT-based client authentication fails for token endpoint when using non-MDDriven config
    
    https://shibboleth.atlassian.net/browse/JOIDC-159
    
    Changed the default claimsValidator value into 'DefaultJWTClaimsValidator'.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 3ffd69d..59189b2 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -39,7 +39,7 @@
     <bean id="AbstractOIDCSSOProfile" parent="AbstractOIDCProfile" abstract="true" 
         p:issuer="#{getObject('shibboleth.oidc.issuer')}"        
         p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
-        p:claimsValidator="#{getObject('shibboleth.oidc.DefaultJWTClaimsValidator')}"
+        p:claimsValidator="#{getObject('DefaultJWTClaimsValidator')}"
         p:encryptionOptional="%{idp.oidc.encryptionOptional:true}"
         p:forcePKCE="%{idp.oidc.forcePKCE:false}"
         p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.