[java-identity-provider] branch main updated: IDP-2274: Unable to decrypt the Assertion when changing issuer ...

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=ab246ba8b7b034afdc5d744cdaa20d7c94d2e7f0

The following commit(s) were added to refs/heads/main by this push:
     new ab246ba8b IDP-2274: Unable to decrypt the Assertion when changing issuer ...
ab246ba8b is described below

commit ab246ba8b7b034afdc5d744cdaa20d7c94d2e7f0
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Wed Apr 3 15:53:12 2024 -0400

    IDP-2274: Unable to decrypt the Assertion when changing issuer ...
    
    Unable to decrypt the Assertion when changing issuer for the AuthnRequest
    to the upstream IdP via RelyingPartyConfigurationon.
    
    Add missing recipient lookup strategy to SAML authN flow bean.
    
    Also replace some literal tab chars that were screwing up the formatting.
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml  | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 10677f3c3..4d288d003 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -333,9 +333,10 @@
 
     <bean id="PopulateDecryptionParameters" parent="NestedWebFlowProfileActionAdaptor" scope="prototype">
         <constructor-arg>
-		    <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
-		        p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
-		        p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
+            <bean class="org.opensaml.profile.action.impl.PopulateDecryptionParameters"
+                p:recipientLookupStrategy-ref="shibboleth.IssuerLookup.Simple"
+                p:configurationLookupStrategy-ref="shibboleth.DecryptionConfigurationLookup"
+                p:decryptionParametersResolver-ref="shibboleth.DecryptionParametersResolver" />
         </constructor-arg>
     </bean>
     

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.