[java-idp-oidc] branch main updated: JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=f67c7f359acf05652dd32f3b98ac83a50be9ac3b

The following commit(s) were added to refs/heads/main by this push:
     new f67c7f35 JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request
f67c7f35 is described below

commit f67c7f359acf05652dd32f3b98ac83a50be9ac3b
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Mar 26 13:22:16 2024 +0200

    JCOMOIDC-105 - Profile configuration setting to require OIDC authentication request
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-105
    
    Exploit the new profile configuration setting id MDDriven-config, defaulting to the already existing
    'idp.oauth2.requireAuthenticationRequestPredicate' property.
---
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml    | 7 +++++--
 .../net/shibboleth/idp/service/relying-party/postconfig.xml        | 5 +++++
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index 6ff3ab6e..4f7b51f0 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -84,8 +84,11 @@
         p:authorizationRequestTypeValidationStrategy-ref="#{'%{idp.oauth2.authorizationRequestTypeValidationStrategy:DefaultAuthorizationRequestTypeValidationStrategy}'.trim()}" />
 
     <bean id="DefaultAuthorizationRequestTypeValidationStrategy"
-        class="net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultAuthorizationRequestTypeValidationStrategy"
-        p:requireAuthenticationRequestPredicate-ref="#{'%{idp.oauth2.requireAuthenticationRequestPredicate:shibboleth.Conditions.TRUE}'.trim()}" />
+        class="net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultAuthorizationRequestTypeValidationStrategy">
+        <property name="requireAuthenticationRequestPredicate">
+            <bean class="net.shibboleth.oidc.profile.config.logic.RequireAuthenticationRequestPredicate" />
+        </property>
+    </bean>
 
     <bean id="InitializeOutboundMessageContext"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeOutboundAuthenticationResponseMessageContext"
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index eb6b777f..f2acd7cd 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -351,6 +351,11 @@
                 </property>
             </bean>
         </property>
+        <property name="requireAuthenticationRequestPredicateLookupStrategy">
+            <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="requireAuthenticationRequestPredicate"
+                p:propertyType="#{T(java.util.function.Predicate)}"
+                p:defaultValue-ref="%{idp.oauth2.requireAuthenticationRequestPredicate:shibboleth.Conditions.TRUE}"/>
+        </property>
     </bean>
     
     <bean id="OIDC.UserInfo.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.