[java-idp-oidc] branch main updated: JOIDC-166 - Allow customization of request object claims validators

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=29dcb7bb7305500871c12a4cfa1b4f07bf61316d

The following commit(s) were added to refs/heads/main by this push:
     new 29dcb7bb JOIDC-166 - Allow customization of request object claims validators
29dcb7bb is described below

commit 29dcb7bb7305500871c12a4cfa1b4f07bf61316d
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Sep 1 13:48:05 2023 +0300

    JOIDC-166 - Allow customization of request object claims validators
    
    https://shibboleth.atlassian.net/browse/JOIDC-166
    
    Renamed the existing validation classees to
    - shibboleth.oidc.DefaultPlainRequestObjectClaimsValidation
    - shibboleth.oidc.DefaultSignedRequestObjectClaimsValidation
    
    They're used as default, but they can be overwritten with the following global beans:
    - shibboleth.oidc.PlainRequestObjectClaimsValidation
    - shibboleth.oidc.SignedRequestObjectClaimsValidation
---
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml   | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index 0a82b3f1..070f6e33 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -255,15 +255,15 @@
 
     <bean id="ValidateRequestObject" class="net.shibboleth.idp.plugin.oidc.op.oauth2.profile.impl.ValidateRequestObject"
         scope="prototype"
-        p:plainClaimsValidator-ref="shibboleth.oidc.PlainRequestObjectClaimsValidation"
-        p:signedClaimsValidator-ref="shibboleth.oidc.SignedRequestObjectClaimsValidation">
+        p:plainClaimsValidator="#{getObject('shibboleth.oidc.PlainRequestObjectClaimsValidation') ?: getObject('shibboleth.oidc.DefaultPlainRequestObjectClaimsValidation')}"
+        p:signedClaimsValidator="#{getObject('shibboleth.oidc.SignedRequestObjectClaimsValidation') ?: getObject('shibboleth.oidc.DefaultSignedRequestObjectClaimsValidation')}">
     </bean>
 
-    <bean id="shibboleth.oidc.PlainRequestObjectClaimsValidation"
+    <bean id="shibboleth.oidc.DefaultPlainRequestObjectClaimsValidation"
         class="net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator"
         p:claimValidators-ref="PlainClaimsValidators" />
 
-    <bean id="shibboleth.oidc.SignedRequestObjectClaimsValidation"
+    <bean id="shibboleth.oidc.DefaultSignedRequestObjectClaimsValidation"
         class="net.shibboleth.oidc.security.jwt.claims.impl.ChainingJWTClaimsValidator"
         p:claimValidators-ref="SignedClaimsValidators" />
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.