[java-idp-oidc] branch main updated: JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)

Henri Mikkonen henri.mikkonen at iki.fi
Fri May 24 14:49:14 UTC 2024


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=a2f169b2f24918fa2ead9c4fc9b768198849c9bd

The following commit(s) were added to refs/heads/main by this push:
     new a2f169b2 JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
a2f169b2 is described below

commit a2f169b2f24918fa2ead9c4fc9b768198849c9bd
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri May 24 17:48:56 2024 +0300

    JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
    
    https://shibboleth.atlassian.net/browse/JOIDC-201
    
    - Fixed test for changes done in previous commit
---
 .../oidc/op/userinfo/profile/impl/ParseAccessTokenTest.java       | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessTokenTest.java
index b8dbfb67..53095d1f 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/userinfo/profile/impl/ParseAccessTokenTest.java
@@ -23,6 +23,7 @@ import net.shibboleth.oidc.profile.core.OidcEventIds;
 import net.shibboleth.oidc.security.credential.BasicJWKCredential;
 import net.shibboleth.shared.collection.CollectionSupport;
 import net.shibboleth.shared.component.ComponentInitializationException;
+import net.shibboleth.shared.logic.PredicateSupport;
 import net.shibboleth.shared.resolver.CriteriaSet;
 import net.shibboleth.shared.resolver.ResolverException;
 import net.shibboleth.shared.security.DataSealerException;
@@ -105,6 +106,7 @@ public class ParseAccessTokenTest extends BaseOIDCResponseActionTest {
             }
             
         });
+        action.setDpopAccessTokenCondition(PredicateSupport.alwaysFalse());
         action.initialize();
     }
 
@@ -191,7 +193,7 @@ public class ParseAccessTokenTest extends BaseOIDCResponseActionTest {
         setUserInfoRequest(req);
         
         event = action.execute(requestCtx);
-        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_GRANT);
+        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_ACCESS_TOKEN);
 
         // Sign with wrong key.
         final KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
@@ -206,7 +208,7 @@ public class ParseAccessTokenTest extends BaseOIDCResponseActionTest {
         setUserInfoRequest(req);
 
         event = action.execute(requestCtx);
-        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_GRANT);
+        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_ACCESS_TOKEN);
     }
 
     /**
@@ -237,7 +239,7 @@ public class ParseAccessTokenTest extends BaseOIDCResponseActionTest {
         final UserInfoRequest req = new UserInfoRequest(new URI("http://example.com"), token);
         setUserInfoRequest(req);
         final Event event = action.execute(requestCtx);
-        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_GRANT);
+        ActionTestingSupport.assertEvent(event, OidcEventIds.INVALID_ACCESS_TOKEN);
     }
 
 }
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list