[java-idp-oidc] 07/35: JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch dev/JOIDC-222
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=a0f93bc048346014e9809e15e397802bedd05b81

commit a0f93bc048346014e9809e15e397802bedd05b81
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Sep 12 09:05:46 2024 +0300

    JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
    
    https://shibboleth.atlassian.net/browse/JOIDC-201
    
    Wired the maximum replay cache record lifetime. It may be customised via
    'idp.oauth2.dpop.maxReplayCacheLifetime' -property, defaults to 5 minutes.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 35106003..43d5bbf6 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -1067,7 +1067,8 @@
             class="net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator"
             p:clockSkew="%{idp.policy.clockSkew:PT1M}"
             p:replayCache-ref="shibboleth.ReplayCache"
-            p:replayCacheRecordLifetime="%{idp.oauth2.dpop.replayCacheLifetime:PT5M}">
+            p:replayCacheRecordLifetime="%{idp.oauth2.dpop.replayCacheLifetime:PT5M}"
+            p:maxReplayCacheRecordLifetime="%{idp.oauth2.dpop.maxReplayCacheLifetime:PT5M}">
             <property name="replayCacheKeyCalculationStrategy">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction"/>
             </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.