[java-idp-plugin-oidc-config] branch main updated: JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=310b6f7bbdda88ef9c1f5be16b37e244f95a89d4

The following commit(s) were added to refs/heads/main by this push:
     new 310b6f7  JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request
310b6f7 is described below

commit 310b6f7bbdda88ef9c1f5be16b37e244f95a89d4
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Mar 26 09:19:49 2024 +0200

    JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-105
    
    Wired the already existing 'idp.oauth2.requireAuthenticationRequestPredicate' property
    to the new profile configuration setting.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index b0200d1..3bed660 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -71,7 +71,8 @@
         p:tlsServerValidationSufficient="%{idp.authn.oidc.rp.client.idtoken.tlsServerValidationOnly:false}"
         p:userInfoHttpRequestMethod="%{idp.authn.oidc.rp.client.userinfo.httpRequestMethod:GET}"
         p:scopes="%{idp.authn.oidc.rp.client.scopes:#{null}}"
-        p:responseModes="%{idp.oauth2.responseModes:}">
+        p:responseModes="%{idp.oauth2.responseModes:}"
+        p:requireAuthenticationRequestPredicate-ref="%{idp.oauth2.requireAuthenticationRequestPredicate:shibboleth.Conditions.TRUE}">
         <property name="forceAuthnPredicate">
             <bean class="net.shibboleth.idp.saml.profile.config.logic.ProxyAwareForceAuthnPredicate" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.