[java-idp-oidc] 29/35: Add missing MDDriven profile configuration option wirings

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch dev/JOIDC-222
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=e51f297a85a055eed8020e229615e20c6be19ce9

commit e51f297a85a055eed8020e229615e20c6be19ce9
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Oct 23 00:09:08 2024 +0300

    Add missing MDDriven profile configuration option wirings
---
 .../idp/service/relying-party/postconfig.xml       | 44 ++++++++++++++++++++++
 1 file changed, 44 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 7d69da3d..bdea0211 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -169,6 +169,14 @@
         <property name="issuerLookupStrategy">
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="issuer" p:defaultValue-ref="shibboleth.oidc.issuer" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -294,6 +302,14 @@
                 p:propertyType="#{T(java.util.function.Function)}"
                 p:defaultValue-ref="shibboleth.oidc.DefaultUnregisteredClientPolicy" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -428,6 +444,22 @@
                 p:propertyType="#{T(java.util.function.Predicate)}"
                 p:defaultValue-ref="%{idp.oauth2.requireAuthenticationRequestPredicate:shibboleth.Conditions.TRUE}"/>
         </property>
+        <property name="requirePushedAuthorizationRequestPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requirePushedAuthorizationRequest" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
+        <property name="requireDpopJktPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopJkt" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
     </bean>
     
     <bean id="OIDC.UserInfo.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"
@@ -573,6 +605,14 @@
                 <constructor-arg value="%{idp.oidc.issueIdTokenViaRefreshToken:true}" />
             </bean>
         </property>
+        <property name="alwaysIssueBearerAccessTokenPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="alwaysIssueBearerAccessToken" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
     </bean>
     
     <bean id="OAUTH2.TokenAudience.MDDriven" parent="AbstractMDDrivenOIDCProfile" lazy-init="true"
@@ -767,6 +807,10 @@
                 <constructor-arg value="true" />
             </bean>
         </property>
+        <property name="requestUriClaimsSetManipulationStrategyLookupStrategy">
+            <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="requestUriClaimsSetManipulationStrategy"
+                p:propertyType="#{T(java.util.function.BiFunction)}" />
+        </property>
     </bean>
 
     <!-- Default client-auth JWT validation wiring. -->

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.