[java-plugin-shibd] branch main updated: Properties for state token mgmt.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-plugin-shibd.

View the commit online:
http://git.shibboleth.net/view/?p=java-plugin-shibd.git;a=commit;h=bbf5561fa02c1d52ef5a6348e414664b8ffbafc1

The following commit(s) were added to refs/heads/main by this push:
     new bbf5561  Properties for state token mgmt.
bbf5561 is described below

commit bbf5561fa02c1d52ef5a6348e414664b8ffbafc1
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Aug 20 09:30:55 2024 -0400

    Properties for state token mgmt.
---
 .../shibboleth/idp/module/conf/sp/sp.properties    | 23 ++++++++++++++--------
 .../net/shibboleth/sp/conf/agents-system.xml       |  4 ++--
 2 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/sp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/sp.properties b/sp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/sp.properties
index 4f5cb7e..4324c42 100644
--- a/sp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/sp.properties
+++ b/sp-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/sp.properties
@@ -1,16 +1,9 @@
-# Controls configuration of service to resolve SP agents.
+# Controls configuration of service to resolve SP agents and applications
 # Uncomment and define to override service resources
 #sp.service.agents.resources = shibboleth.AgentResolverResources
 #sp.service.agents.failFast = false
 sp.service.agents.checkInterval = PT5M
 
-# General SP cookie properties (maxAge only applies to persistent cookies)
-#sp.cookie.secure = true
-#sp.cookie.httpOnly = true
-#sp.cookie.domain =
-#sp.cookie.path =
-#sp.cookie.maxAge = 31536000
-
 # Settings for SP public/private signing and encryption key(s)
 # During decryption key rollover, point the ".2" properties at a second
 # keypair, uncomment in credentials.xml, then publish it in your metadata.
@@ -34,3 +27,17 @@ sp.encryption.cert = %{idp.home}/credentials/sp/sp-encryption.crt
 
 # Default precedence/set of Session Initiator flows to attempt
 #sp.application.sessionInitiators = saml2
+
+# General SP cookie properties (maxAge only applies to persistent cookies)
+#sp.cookie.secure = true
+#sp.cookie.httpOnly = true
+#sp.cookie.domain =
+#sp.cookie.path =
+#sp.cookie.maxAge = 31536000
+
+# Default state token management (SAML RelayState, etc.)
+# Set to shibboleth.CookieStateTokenManager to switch to cookie-based mechanism
+#sp.stateToken.Manager = shibboleth.StorageStateTokenManager
+# Controls storage back-end for storage-based state tokens
+#sp.stateToken.StorageService = shibboleth.StorageService
+
diff --git a/sp-conf-impl/src/main/resources/net/shibboleth/sp/conf/agents-system.xml b/sp-conf-impl/src/main/resources/net/shibboleth/sp/conf/agents-system.xml
index 8932392..61dba3f 100644
--- a/sp-conf-impl/src/main/resources/net/shibboleth/sp/conf/agents-system.xml
+++ b/sp-conf-impl/src/main/resources/net/shibboleth/sp/conf/agents-system.xml
@@ -35,13 +35,13 @@
         p:relyingPartyConfigurations-ref="shibboleth.RelyingPartyOverrides"
         p:metricName="net.shibboleth.sp.relyingparty.configurations"
         p:sessionInitiators-ref="shibboleth.SessionInitiators"
-        p:stateTokenManager="#{getObject('%{sp.stateToken.Manager:shibboleth.StorageStateTokenManager}'.trim())}" />
+        p:stateTokenManager-ref="#{'%{sp.stateToken.Manager:shibboleth.StorageStateTokenManager}'.trim()}" />
 
     <bean id="shibboleth.SessionInitiators" parent="shibboleth.CommaDelimStringArray"
         c:_0="%{sp.application.sessionInitiators:saml2}" />
 
     <bean id="shibboleth.StorageStateTokenManager" class="net.shibboleth.sp.impl.StorageServiceStateTokenManager" lazy-init="true"
-        p:storageService="#{getObject('%{sp.stateToken.StorageService:shibboleth.StorageService}'.trim())}" />
+        p:storageService-ref="#{'%{sp.stateToken.StorageService:shibboleth.StorageService}'.trim()}" />
 
     <bean id="shibboleth.CookieStateTokenManager" class="net.shibboleth.sp.impl.CookieStateTokenManager" lazy-init="true"
         p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.