[java-idp-oidc] branch main updated: Add missing MDDriven profile configuration option wirings

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=451fffb43e2df78dfdc4db16607df85b1003de7b

The following commit(s) were added to refs/heads/main by this push:
     new 451fffb4 Add missing MDDriven profile configuration option wirings
451fffb4 is described below

commit 451fffb43e2df78dfdc4db16607df85b1003de7b
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Oct 23 00:09:08 2024 +0300

    Add missing MDDriven profile configuration option wirings
---
 .../idp/service/relying-party/postconfig.xml       | 44 ++++++++++++++++++++++
 1 file changed, 44 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 432cf2e4..bc693430 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -163,6 +163,14 @@
         <property name="issuerLookupStrategy">
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="issuer" p:defaultValue-ref="shibboleth.oidc.issuer" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -288,6 +296,14 @@
                 p:propertyType="#{T(java.util.function.Function)}"
                 p:defaultValue-ref="shibboleth.oidc.DefaultUnregisteredClientPolicy" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -422,6 +438,22 @@
                 p:propertyType="#{T(java.util.function.Predicate)}"
                 p:defaultValue-ref="%{idp.oauth2.requireAuthenticationRequestPredicate:shibboleth.Conditions.TRUE}"/>
         </property>
+        <property name="requirePushedAuthorizationRequestPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requirePushedAuthorizationRequest" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
+        <property name="requireDpopJktPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopJkt" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
     </bean>
     
     <bean id="OIDC.UserInfo.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"
@@ -567,6 +599,14 @@
                 <constructor-arg value="%{idp.oidc.issueIdTokenViaRefreshToken:true}" />
             </bean>
         </property>
+        <property name="alwaysIssueBearerAccessTokenPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="alwaysIssueBearerAccessToken" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
     </bean>
     
     <bean id="OAUTH2.TokenAudience.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"
@@ -761,6 +801,10 @@
                 <constructor-arg value="true" />
             </bean>
         </property>
+        <property name="requestUriClaimsSetManipulationStrategyLookupStrategy">
+            <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="requestUriClaimsSetManipulationStrategy"
+                p:propertyType="#{T(java.util.function.BiFunction)}" />
+        </property>
     </bean>
 
     <!-- Default client-auth JWT validation wiring. -->

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.