[java-idp-oidc] 30/35: Replaced requireDpopProofPredicate in the MDDriven configuration

Henri Mikkonen henri.mikkonen at iki.fi
Thu Oct 24 14:01:55 UTC 2024


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch dev/JOIDC-222
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=60224868f672a138108080d82babf65450e19d31

commit 60224868f672a138108080d82babf65450e19d31
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Oct 23 09:17:05 2024 +0300

    Replaced requireDpopProofPredicate in the MDDriven configuration
    
    - Instead of AbstractMDDrivenOAuthTokenValidatingProfile, locate it in AbstractMDDrivenOAuthClientAuthenticatableProfile
      - It covers all the others except OIDC.UserInfo.MDDriven
    - Instead of AbstractMDDrivenOIDCSSOProfile, locate it in OIDC.UserInfo.MDDriven
---
 .../idp/service/relying-party/postconfig.xml       | 32 +++++++++++-----------
 1 file changed, 16 insertions(+), 16 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index bdea0211..69776e0d 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -153,6 +153,14 @@
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="messageHandler"
                 p:propertyType="#{T(java.util.function.Function)}" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofSignatureValidationConfigurationLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofSignatureValidationConfiguration"
                 p:propertyType="#{T(net.shibboleth.oidc.security.jose.SignatureValidationConfiguration)}"
@@ -169,14 +177,6 @@
         <property name="issuerLookupStrategy">
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="issuer" p:defaultValue-ref="shibboleth.oidc.issuer" />
         </property>
-        <property name="requireDpopProofPredicate">
-            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
-                <constructor-arg>
-                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
-                </constructor-arg>
-                <constructor-arg value="false" />
-            </bean>
-        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -302,14 +302,6 @@
                 p:propertyType="#{T(java.util.function.Function)}"
                 p:defaultValue-ref="shibboleth.oidc.DefaultUnregisteredClientPolicy" />
         </property>
-        <property name="requireDpopProofPredicate">
-            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
-                <constructor-arg>
-                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
-                </constructor-arg>
-                <constructor-arg value="false" />
-            </bean>
-        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"
@@ -502,6 +494,14 @@
                 p:propertyType="#{T(java.util.function.Function)}"
                 p:defaultValue-ref="shibboleth.oidc.DefaultUnregisteredClientPolicy" />
         </property>
+        <property name="requireDpopProofPredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="requireDpopProof" />
+                </constructor-arg>
+                <constructor-arg value="false" />
+            </bean>
+        </property>
         <property name="dpopProofClaimsValidatorLookupStrategy">
             <bean parent="shibboleth.MDDrivenBeanProperty" p:propertyName="dpopProofClaimsValidator"
                 p:propertyType="#{T(net.shibboleth.oidc.jwt.claims.ClaimsValidator)}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list