[java-idp-plugin-vci] 02/02: Adopt for now proper token endpoint error mapping

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/DPOP
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/f98d244b59edade76de0652d9363b90f51f09bb4

commit f98d244b59edade76de0652d9363b90f51f09bb4
Author: jlauros <janne.lauros at csc.fi>
AuthorDate: Mon Dec 8 13:57:35 2025 +0200

    Adopt for now proper token endpoint error mapping
---
 .../idp/flows/openid/vci/token/token-beans.xml     | 24 ++++++++--------------
 1 file changed, 8 insertions(+), 16 deletions(-)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
index f454abe..e724c11 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
@@ -99,22 +99,14 @@
         scope="prototype" p:issuerLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple" 
         c:sealer-ref="#{'%{idp.oidc.tokenSealer:shibboleth.oidc.TokenSealer}'.trim()}" />
 
-  <bean id="BuildErrorResponseFromEvent" class="net.shibboleth.oidc.profile.impl.BuildJSONErrorResponseFromEvent"
-        scope="prototype" p:defaultStatusCode="400" p:defaultCode="invalid_request"
-        p:httpServletResponseSupplier-ref="shibboleth.HttpServletResponseSupplier">
-    <property name="eventContextLookupStrategy">
-      <bean class="net.shibboleth.idp.profile.context.navigate.WebFlowCurrentEventLookupFunction" />
-    </property>
-    <property name="mappedErrors">
-      <map value-type="com.nimbusds.oauth2.sdk.ErrorObject">
-        <entry key="#{T(net.shibboleth.oidc.profile.core.OidcEventIds).INVALID_DPOP_PROOF}" value="#{T(com.nimbusds.oauth2.sdk.token.DPoPTokenError).INVALID_DPOP_PROOF}" />
-        <entry key="#{T(net.shibboleth.oidc.profile.core.OidcEventIds).MISSING_DPOP_PROOF}" value="#{T(com.nimbusds.oauth2.sdk.token.DPoPTokenError).INVALID_DPOP_PROOF}" />
-        <entry key="#{T(net.shibboleth.oidc.profile.core.OidcEventIds).INVALID_DPOP_NONCE}" value="#{T(com.nimbusds.oauth2.sdk.token.DPoPTokenError).USE_DPOP_NONCE}" />
-        <entry key="#{T(org.opensaml.profile.action.EventIds).ACCESS_DENIED}" value="#{T(com.nimbusds.oauth2.sdk.OAuth2Error).INVALID_CLIENT}" />
-        <entry key="#{T(org.geant.shibboleth.plugin.openidvci.profile.OpenIDVCIEventIds).NO_CREDENTIAL_OFFER}" value="#{T(org.geant.shibboleth.plugin.openidvci.messaging.error.OpenIDVCIError).NO_CREDENTIAL_OFFER}" />
-      </map>
-    </property>
-  </bean>
+  <bean id="BuildErrorResponseFromEvent"
+        class="net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildTokenErrorResponseFromEvent" scope="prototype"
+        p:httpServletResponseSupplier-ref="shibboleth.HttpServletResponseSupplier"
+        p:mappedErrors="#{getObject('shibboleth.oidc.token.MappedErrors') ?: getObject('shibboleth.oidc.DefaultApiMappedErrors')}">
+        <property name="eventContextLookupStrategy">
+            <bean class="net.shibboleth.idp.profile.context.navigate.WebFlowCurrentEventLookupFunction" />
+        </property>
+    </bean>
 
   <bean id="shibboleth.ClientIDLookupStrategy" class="org.geant.shibboleth.plugin.openidvci.profile.context.navigate.APIRequestClientIDLookupFunction"
         p:credentialOfferCache-ref="openidvci.CredentialOfferCache"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.