[java-idp-plugin-oidc-config] branch main updated: JCOMOIDC-100 - Allowed ResponseModes should be configurable

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=55c7abef5ae8019d77cbaf5f43c8d462356711f6

The following commit(s) were added to refs/heads/main by this push:
     new 55c7abe  JCOMOIDC-100 - Allowed ResponseModes should be configurable
55c7abe is described below

commit 55c7abef5ae8019d77cbaf5f43c8d462356711f6
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Mon Mar 11 13:52:33 2024 +0200

    JCOMOIDC-100 - Allowed ResponseModes should be configurable
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-100
    
    Wired property 'idp.oauth2.responseModes', defaulting to empty string. Empty
    value means that all supported response modes are allowed.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 4e2c40b..b0200d1 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -70,7 +70,8 @@
         p:responseMode="%{idp.authn.oidc.rp.client.responseMode:#{null}}"
         p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
         p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"
-        p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}">
+        p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}"
+        p:responseModes="%{idp.oauth2.responseModes:}">
         <property name="forceAuthnPredicate">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.