[java-idp-plugin-vci] branch dev/DPOP updated: Credentials flow to perform DPoP Validation

Codeberg noreply at shibboleth.net
Mon Dec 8 11:09:29 UTC 2025


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/DPOP
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/e085ff0221a3c37b7df0212ab4f00c1ace6c4225

The following commit(s) were added to refs/heads/dev/DPOP by this push:
     new e085ff0  Credentials flow to perform DPoP Validation
e085ff0 is described below

commit e085ff0221a3c37b7df0212ab4f00c1ace6c4225
Author: jlauros <janne.lauros at csc.fi>
AuthorDate: Mon Dec 8 13:09:08 2025 +0200

    Credentials flow to perform DPoP Validation
---
 .../idp/flows/openid/vci/abstract-api/abstract-api-flow.xml        | 7 +------
 .../idp/flows/openid/vci/credentials/credentials-flow.xml          | 2 +-
 2 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract-api/abstract-api-flow.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract-api/abstract-api-flow.xml
index dc924ef..67a33cb 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract-api/abstract-api-flow.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract-api/abstract-api-flow.xml
@@ -20,14 +20,9 @@
     <evaluate expression="SelectProfileConfiguration"/>
     <evaluate expression="PostLookupPopulateAuditContext"/>
     <evaluate expression="'proceed'"/>
-    <transition on="proceed" to="OptionalAuthentication"/>
+    <transition on="proceed" to="AuthenticationSetup"/>
   </action-state>
   
-  <decision-state id="OptionalAuthentication">
-    <if test="flowScope.skipOAuth2ClientAuth"
-        then="ResumeAfterAuthentication" else="AuthenticationSetup" />
-  </decision-state>
-  
   <action-state id="AuthenticationSetup">
     <evaluate expression="InitializeAuthenticationContext" />
     <evaluate expression="'proceed'" />
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-flow.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-flow.xml
index c54171f..4e13778 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-flow.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-flow.xml
@@ -28,7 +28,7 @@
     </transition>
   </action-state>
 
-  <action-state id="ResumeAfterAuthentication">
+  <action-state id="ResumeAfterDoDPoPProofValidation">
     <evaluate expression="PopulateCredentialsSignatureSigningParameters" />
     <evaluate expression="'proceed'"/>
     <transition on="proceed" to="BuildResponseMessage"/>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list