[java-idp-oidc] branch main updated: JOIDC-13 - Support for OIDC Logout

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=acf26d09fe8b049eeb1a9873c6c69198ded9d591

The following commit(s) were added to refs/heads/main by this push:
     new acf26d09 JOIDC-13 - Support for OIDC Logout
acf26d09 is described below

commit acf26d09fe8b049eeb1a9873c6c69198ded9d591
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Apr 11 08:39:52 2024 +0300

    JOIDC-13 - Support for OIDC Logout
    
    https://shibboleth.atlassian.net/browse/JOIDC-13
    
    Fixed the wrong default security configuration in MDDriven logout profile.
    
    Switched tests into using the OIDC.Logout.MDDriven.
---
 .../shibboleth/idp/service/relying-party/postconfig.xml    |  5 +++++
 .../net/shibboleth/idp/module/conf/relying-party.xml       | 14 +++++++-------
 2 files changed, 12 insertions(+), 7 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index f2acd7cd..b6a3317e 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -577,6 +577,11 @@
 
     <bean id="OIDC.Logout.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"
           class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCLogoutConfiguration">
+        <property name="securityConfigurationLookupStrategy">
+            <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="securityConfiguration"
+                p:propertyType="#{T(org.opensaml.security.config.SecurityConfiguration)}"
+                p:defaultValue-ref="%{idp.security.oidc.logout.config:shibboleth.oidc.logout.DefaultSecurityConfiguration}" />
+        </property>
         <property name="issuerLookupStrategy">
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="issuer"
                   p:defaultValue-ref="shibboleth.oidc.issuer"/>
diff --git a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/relying-party.xml b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/relying-party.xml
index 0ffbe878..b3a7bc34 100644
--- a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/relying-party.xml
+++ b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/relying-party.xml
@@ -65,7 +65,7 @@
                 <ref bean="OIDC.SSO.MDDriven" />
                 <ref bean="OIDC.UserInfo.MDDriven" />
                 <ref bean="OIDC.Registration.MDDriven" />
-                <ref bean="OIDC.Logout" />
+                <ref bean="OIDC.Logout.MDDriven" />
                 <ref bean="OAUTH2.Token.MDDriven" />
                 <ref bean="OAUTH2.Introspection.MDDriven" />
                 <ref bean="OAUTH2.Revocation.MDDriven" />
@@ -123,7 +123,7 @@
                      <bean parent="OIDC.SSO.MDDriven" p:encryptionOptional="false" />
                      <bean parent="OAUTH2.Token.MDDriven" p:encryptionOptional="false" />
                      <bean parent="OIDC.UserInfo.MDDriven" p:encryptionOptional="false" />
-                     <bean parent="OIDC.Logout" p:encryptionOptional="false"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:encryptionOptional="false"/>
                      <ref bean="OAUTH2.Revocation" />
                  </list>
             </property>
@@ -158,28 +158,28 @@
         <bean parent="RelyingPartyByName" c:relyingPartyIds="mockClientIdLogoutEncryptionEnforced">
             <property name="profileConfigurations">
                  <list>
-                     <bean parent="OIDC.Logout" p:encryptionOptional="false"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:encryptionOptional="false"/>
                  </list>
             </property>
         </bean>
         <bean parent="RelyingPartyByName" c:relyingPartyIds="mockClientIdLogoutFrontSuccessNoRevoke">
             <property name="profileConfigurations">
                  <list>
-                     <bean parent="OIDC.Logout" p:frontChannelSuccess="true"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:frontChannelSuccess="true"/>
                  </list>
             </property>
         </bean>
         <bean parent="RelyingPartyByName" c:relyingPartyIds="mockClientIdLogoutFrontSuccessNoRevokeRevocationDisabled">
             <property name="profileConfigurations">
                  <list>
-                     <bean parent="OIDC.Logout" p:frontChannelSuccess="true" p:revokeTokens="false"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:frontChannelSuccess="true" p:revokeTokens="false"/>
                  </list>
             </property>
         </bean>
         <bean parent="RelyingPartyByName" c:relyingPartyIds="mockClientIdLogoutFrontSuccessWithRevoke">
             <property name="profileConfigurations">
                  <list>
-                     <bean parent="OIDC.Logout" p:frontChannelSuccess="true"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:frontChannelSuccess="true"/>
                      <ref bean="OAUTH2.Revocation" />
                  </list>
             </property>
@@ -187,7 +187,7 @@
         <bean parent="RelyingPartyByName" c:relyingPartyIds="mockClientIdLogoutPreferBackChannel">
             <property name="profileConfigurations">
                  <list>
-                     <bean parent="OIDC.Logout" p:preferFrontChannel="false"/>
+                     <bean parent="OIDC.Logout.MDDriven" p:preferFrontChannel="false"/>
                  </list>
             </property>
         </bean>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.