[java-idp-plugin-oidc-rp] branch main updated: Add PKCE properties to default config

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=809796695d3f7ad7571c2fe9c105d44c0adc2bc0

The following commit(s) were added to refs/heads/main by this push:
     new 8097966  Add PKCE properties to default config
8097966 is described below

commit 809796695d3f7ad7571c2fe9c105d44c0adc2bc0
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Apr 8 15:46:35 2024 +0100

    Add PKCE properties to default config
---
 .../shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
index 5bd0a05..3eda897 100644
--- a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
+++ b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
@@ -55,6 +55,10 @@ idp.authn.oidc.rp.c14n.subjectidentifier.disabled = false
 ## The OP's keyset document fetch interval i.e. how long should keys from the OP be cached.
 #idp.oidc.provider.keyfetch.interval = PT30M
 
+## Enable PKCE for the authorization code flow
+idp.oidc.forcePKCE = true
+idp.oidc.allowPKCEPlain = false
+
 ## Whether to use a request object to send authentication parameters, and if it should be encrypted and or signed.
 #idp.oidc.requestobject.used= false
 #idp.oidc.requestobject.encrypted = false

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.