[java-idp-plugin-vci] 01/03: Get potential claims from specific access token field

Codeberg noreply at shibboleth.net
Fri Dec 5 12:43:48 UTC 2025


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/DPOP
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/e0235dd2615190f60fb30d3c91a927432b07eb39

commit e0235dd2615190f60fb30d3c91a927432b07eb39
Author: jlauros <janne.lauros at csc.fi>
AuthorDate: Fri Dec 5 14:40:53 2025 +0200

    Get potential claims from specific access token field
---
 .../profile/impl/FormOutboundCredentialsResponseMessage.java      | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/FormOutboundCredentialsResponseMessage.java b/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/FormOutboundCredentialsResponseMessage.java
index 92825cc..239e1e9 100644
--- a/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/FormOutboundCredentialsResponseMessage.java
+++ b/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/FormOutboundCredentialsResponseMessage.java
@@ -34,6 +34,7 @@ import org.geant.shibboleth.plugin.openidvci.messaging.impl.CredentialOfferReque
 import org.geant.shibboleth.plugin.openidvci.messaging.impl.CredentialSuccessResponse;
 import org.geant.shibboleth.plugin.openidvci.messaging.impl.OpenIDVCICredentialsRequest;
 import org.geant.shibboleth.plugin.openidvci.profile.impl.stolen.AbstractOIDCResponseAction;
+import org.geant.shibboleth.plugin.openidvci.profile.logic.OpenIDVCITokenManipulationStrategy;
 import org.geant.shibboleth.plugin.openidvci.util.SelectiveDisclosureClaimSetUtil;
 import org.opensaml.messaging.context.navigate.ChildContextLookup;
 import org.opensaml.profile.action.ActionSupport;
@@ -185,8 +186,9 @@ public class FormOutboundCredentialsResponseMessage extends AbstractOIDCResponse
                     .getSubcontext(CredentialsContext.class);
 
             CredentialOfferRequestedCredential credential = CredentialOfferRequestedCredential
-                    .parse(getOidcResponseContext().getAuthorizationGrantClaimsSet().getUserinfoDeliveryClaims()
-                            .getStringClaim(ctx.getCredentialIdentifier()));
+                    .parse((String) getOidcResponseContext().getAuthorizationGrantClaimsSet().getClaimsSet()
+                            .getJSONObjectClaim(OpenIDVCITokenManipulationStrategy.PotentialClaims)
+                            .get(ctx.getCredentialIdentifier()));
             log.info("Credentials stored credential {} {} ", ctx.getCredentialIdentifier(), credential.serialize());
             log.info("Key used, algorithm {}", signatureSigningParameters.getSignatureAlgorithm());
 
@@ -264,7 +266,7 @@ public class FormOutboundCredentialsResponseMessage extends AbstractOIDCResponse
             CredentialSuccessResponse response = new CredentialSuccessResponse(credentials);
             log.info("Setting response as {}", response.toOffer());
             profileRequestContext.ensureOutboundMessageContext().setMessage(response);
-        } catch (ParseException | JOSEException | JsonProcessingException e) {
+        } catch (ParseException | JOSEException | JsonProcessingException | java.text.ParseException e) {
             log.error("{} Error occurred while parsing objects {}", getLogPrefix(), e);
             ActionSupport.buildEvent(profileRequestContext, EventIds.IO_ERROR);
         }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list