[java-idp-plugin-oidc-config] branch main updated: JCOMOIDC-95 - Add clockSkew and idGenerator configuration hooks to JSONSecurityConfiguration

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=163ed691ca45c1eb25dca4d191cdf4959d0f1242

The following commit(s) were added to refs/heads/main by this push:
     new 163ed69  JCOMOIDC-95 - Add clockSkew and idGenerator configuration hooks to JSONSecurityConfiguration
163ed69 is described below

commit 163ed691ca45c1eb25dca4d191cdf4959d0f1242
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Mar 26 13:17:27 2024 +0200

    JCOMOIDC-95 - Add clockSkew and idGenerator configuration hooks to JSONSecurityConfiguration
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-95
    
    Wired the 'idp.policy.clockSkew' property and secure idGenerator to the constructor.
---
 .../net/shibboleth/idp/service/relying-party/postconfig.xml   | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 3bed660..d20616f 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -138,7 +138,16 @@
      
 
     <bean id="shibboleth.oidc.DefaultSecurityConfiguration"
-        class="net.shibboleth.oidc.profile.config.JSONSecurityConfiguration">
+        class="net.shibboleth.oidc.profile.config.JSONSecurityConfiguration" c:clockSkew="%{idp.policy.clockSkew:PT1M}">
+        <constructor-arg name="idGenerator">
+                <bean 
+                    class="net.shibboleth.shared.security.IdentifierGenerationStrategy" factory-method="getInstance">
+                <constructor-arg>
+                    <util:constant
+                        static-field="net.shibboleth.shared.security.IdentifierGenerationStrategy.ProviderType.SECURE" />
+                </constructor-arg>
+                </bean>
+        </constructor-arg>
         <property name="jwtSignatureSigningConfiguration">
             <ref bean="#{'%{idp.oidc.signing.config:shibboleth.oidc.SigningConfiguration}'.trim()}" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.