[java-idp-plugin-oidc-config] branch main updated: JCOMOIDC-123 - Profile configuration setting for strict scope validation

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=162f3bb31d241ef684a076ccb4580783f8eb4a1e

The following commit(s) were added to refs/heads/main by this push:
     new 162f3bb  JCOMOIDC-123 - Profile configuration setting for strict scope validation
162f3bb is described below

commit 162f3bb31d241ef684a076ccb4580783f8eb4a1e
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Oct 2 14:29:45 2024 +0300

    JCOMOIDC-123 - Profile configuration setting for strict scope validation
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-123
    
    - Wire 'idp.oidc.strictScopeValidation' property, defaults to 'false'
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 124a86d..7b4e083 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -56,7 +56,8 @@
         p:unregisteredClientPolicy="#{getObject('shibboleth.oidc.DefaultUnregisteredClientPolicy')}"
         p:dpopProofClaimsValidator="#{getObject('DefaultDPoPProofClaimsValidator')}"
         p:dpopProofSignatureValidationConfiguration="#{getObject('DPoPSignatureValidationConfiguration')}"
-        p:dpopProofNonceGenerator="#{getObject('DefaultOAuth2DPoPNonceGenerator')}" />
+        p:dpopProofNonceGenerator="#{getObject('DefaultOAuth2DPoPNonceGenerator')}"
+        p:strictScopeValidation="%{idp.oidc.strictScopeValidation:false}"/>
 
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.