[java-idp-plugin-oidc-config] 02/02: JCOMOIDC-112 - Profile configuration settings for OAuth2 DPoP

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=51ef20dfa706b5c1c14c46d5fcba32fd6d5fed97

commit 51ef20dfa706b5c1c14c46d5fcba32fd6d5fed97
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed May 8 14:23:39 2024 +0300

    JCOMOIDC-112 - Profile configuration settings for OAuth2 DPoP
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-112
    
    Included default references to 'dpopProofClaimsValidator' and 'dpopProofSignatureValidationConfiguration'.
    The corresponding bean values are set on OP 4.2.0+, but are nullable so OP installation is not required.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index d20616f..fd217fe 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -53,7 +53,9 @@
         p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
         p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
         p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"
-        p:unregisteredClientPolicy="#{getObject('shibboleth.oidc.DefaultUnregisteredClientPolicy')}"/>
+        p:unregisteredClientPolicy="#{getObject('shibboleth.oidc.DefaultUnregisteredClientPolicy')}"
+        p:dpopProofClaimsValidator="#{getObject('DefaultDPoPProofClaimsValidator')}"
+        p:dpopProofSignatureValidationConfiguration="#{getObject('DPoPSignatureValidationConfiguration')}" />
 
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        
@@ -373,5 +375,4 @@
         </constructor-arg>
     </bean>
 
-
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.