[java-idp-oidc] branch main updated: JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=54c7acb9066231be09cc8b8a00298e4b835ccda5

The following commit(s) were added to refs/heads/main by this push:
     new 54c7acb9 JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
54c7acb9 is described below

commit 54c7acb9066231be09cc8b8a00298e4b835ccda5
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Sep 12 09:05:46 2024 +0300

    JOIDC-201 - Support for OAuth 2.0 Demonstrating Proof of Possession (DPoP)
    
    https://shibboleth.atlassian.net/browse/JOIDC-201
    
    Wired the maximum replay cache record lifetime. It may be customised via
    'idp.oauth2.dpop.maxReplayCacheLifetime' -property, defaults to 5 minutes.
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml   | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index a5c1b8aa..27dc2463 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -1061,7 +1061,8 @@
             class="net.shibboleth.oidc.security.jwt.claims.impl.JWTIdentifierClaimsValidator"
             p:clockSkew="%{idp.policy.clockSkew:PT1M}"
             p:replayCache-ref="shibboleth.ReplayCache"
-            p:replayCacheRecordLifetime="%{idp.oauth2.dpop.replayCacheLifetime:PT5M}">
+            p:replayCacheRecordLifetime="%{idp.oauth2.dpop.replayCacheLifetime:PT5M}"
+            p:maxReplayCacheRecordLifetime="%{idp.oauth2.dpop.maxReplayCacheLifetime:PT5M}">
             <property name="replayCacheKeyCalculationStrategy">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.CalculateSha256DigestForLongKeyFunction"/>
             </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.