[java-idp-oidc] branch main updated: JOIDC-206 - Provide method to avoid Nimbus message parsing restrictions

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=7affbde6c3c50c54b5eeb3ac5751fcef6db43edf

The following commit(s) were added to refs/heads/main by this push:
     new 7affbde6 JOIDC-206 - Provide method to avoid Nimbus message parsing restrictions
7affbde6 is described below

commit 7affbde6c3c50c54b5eeb3ac5751fcef6db43edf
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Sep 6 12:19:44 2024 +0300

    JOIDC-206 - Provide method to avoid Nimbus message parsing restrictions
    
    https://shibboleth.atlassian.net/browse/JOIDC-206
    
    Switched the hardcoded bean IDs to use properties instead.
---
 .../shibboleth/idp/flows/oauth2/introspection/introspection-beans.xml | 2 +-
 .../flows/oauth2/pushed-authorization/pushed-authorization-beans.xml  | 2 +-
 .../net/shibboleth/idp/flows/oauth2/revocation/revocation-beans.xml   | 2 +-
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml       | 4 ++--
 .../net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml   | 2 +-
 .../net/shibboleth/idp/flows/oidc/register/register-beans.xml         | 2 +-
 .../META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml      | 2 +-
 .../net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml         | 2 +-
 8 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/introspection/introspection-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/introspection/introspection-beans.xml
index c0628664..78a2129e 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/introspection/introspection-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/introspection/introspection-beans.xml
@@ -20,7 +20,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2IntrospectionRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('IntrospectionRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.IntrospectionRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
index 213e9c47..f8f5669c 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
@@ -20,7 +20,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2PushedAuthorizationRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('PushedAuthorizationRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.PushedAuthorizationRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/revocation/revocation-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/revocation/revocation-beans.xml
index 61409af9..2bfe7016 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/revocation/revocation-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/revocation/revocation-beans.xml
@@ -20,7 +20,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2RevocationRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('RevocationRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.RevocationRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index 81e8fcce..5d39bf5e 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -22,7 +22,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('AuthenticationRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.AuthenticationRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
@@ -31,7 +31,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.oauth2.decoding.impl.OAuth2AuthorizationRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('AuthorizationRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.AuthorizationRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
index 51f0e6d6..42db3a83 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
@@ -22,7 +22,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCLogoutRequestDecoder"
                 scope="prototype" p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('EndSessionRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.EndSessionRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/register/register-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/register/register-beans.xml
index 8108d70e..0795687d 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/register/register-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/register/register-beans.xml
@@ -32,7 +32,7 @@
                 p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
                 p:objectMapper-ref="#{'%{idp.oidc.logging.objectMapper:shibboleth.oidc.JSONObjectMapper}'.trim()}"
-                p:customRequestParser="#{getObject('RegisterRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.RegisterRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
index a0704827..b23f91f4 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/token/token-beans.xml
@@ -26,7 +26,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCTokenRequestDecoder" scope="prototype"
                 p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('TokenRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.TokenRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
index 08b9dc23..61113570 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/userinfo/userinfo-beans.xml
@@ -23,7 +23,7 @@
             <bean class="net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCUserInfoRequestDecoder" scope="prototype"
                 p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
                 p:removeIpAddressFromEndpointUri="%{idp.oidc.logging.removeIpAddressFromProtocolMessage:false}"
-                p:customRequestParser="#{getObject('UserInfoRequestParser')}"/>
+                p:customRequestParser="#{getObject('%{idp.oidc.requestParser.UserInfoRequest:}'.trim())}"/>
         </constructor-arg>
     </bean>
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.