[java-idp-plugin-oidc-config] branch main updated: JCOMOIDC-81 - Support policies for unregistered clients

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=6551fba88a568efc56a7d2b847d69855db393bbb

The following commit(s) were added to refs/heads/main by this push:
     new 6551fba  JCOMOIDC-81 - Support policies for unregistered clients
6551fba is described below

commit 6551fba88a568efc56a7d2b847d69855db393bbb
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Sep 5 21:31:11 2023 +0300

    JCOMOIDC-81 - Support policies for unregistered clients
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-81
    
    Wire unregisteredClientPolicy to AbstractOIDCSSOProfile if the object 'shibboleth.oidc.DefaultUnregisteredClientPolicy'
    exists. It's defined by OP, but might be null if OP is not installed to the deployment.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 070389f..5b8367e 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -51,7 +51,8 @@
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"        
         p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
         p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
-        p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"/>
+        p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"
+        p:unregisteredClientPolicy="#{getObject('shibboleth.oidc.DefaultUnregisteredClientPolicy')}"/>
 
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.