[java-idp-plugin-vci] 04/06: clientIDLookupStrategy that takes ProfileRequestContext and not MessageContext as input

Codeberg noreply at shibboleth.net
Tue Dec 9 07:21:59 UTC 2025


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/DPOP
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/553308441af25bf0559b8211c5d4e2e2e1761429

commit 553308441af25bf0559b8211c5d4e2e2e1761429
Author: jlauros <janne.lauros at csc.fi>
AuthorDate: Tue Dec 9 09:09:12 2025 +0200

    clientIDLookupStrategy that takes ProfileRequestContext and not MessageContext as input
---
 .../net/shibboleth/idp/flows/openid/vci/token/token-beans.xml  | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
index e724c11..973c63d 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
@@ -22,7 +22,7 @@
   
   <bean id="UnwrapOrLocateGrant" class="org.geant.shibboleth.plugin.openidvci.profile.impl.UnwrapGrant" scope="prototype"
         c:sealer-ref="#{'%{idp.oidc.tokenSealer:shibboleth.oidc.TokenSealer}'.trim()}"
-        p:clientIDLookupStrategy-ref="shibboleth.ClientIDLookupStrategy"
+        p:clientIDLookupStrategy-ref="vci.profileReq.ClientIDLookupStrategy"
         p:credentialOfferCache-ref="openidvci.CredentialOfferCache"/>
   
   <bean id="ValidateGrant" class="org.geant.shibboleth.plugin.openidvci.profile.impl.ValidateGrant" scope="prototype"
@@ -89,6 +89,7 @@
         p:dataSealer="#{getObject('%{idp.oidc.tokenSealer:shibboleth.oidc.TokenSealer}'.trim())}"
         p:xmlSafeIdentifier="%{idp.oidc.xmlSafeIdentifiers:true}"
         p:identifierGeneratorLookupStrategy-ref="shibboleth.oidc.DefaultIdentifierGenerationStrategy"
+        p:clientIDLookupStrategy-ref="vci.profileReq.ClientIDLookupStrategy"
         p:objectMapper-ref="#{'%{idp.oidc.logging.objectMapper:shibboleth.oidc.JSONObjectMapper}'.trim()}" />
               
   <bean id="SetOAuthAccessTokenToResponseContext"
@@ -96,8 +97,7 @@
         scope="prototype" />
 
   <bean id="FormOutboundMessage" class="org.geant.shibboleth.plugin.openidvci.profile.impl.FormOutboundTokenResponseMessage"
-        scope="prototype" p:issuerLookupStrategy-ref="shibboleth.ResponderIdLookup.Simple" 
-        c:sealer-ref="#{'%{idp.oidc.tokenSealer:shibboleth.oidc.TokenSealer}'.trim()}" />
+        scope="prototype" />
 
   <bean id="BuildErrorResponseFromEvent"
         class="net.shibboleth.idp.plugin.oidc.op.profile.impl.BuildTokenErrorResponseFromEvent" scope="prototype"
@@ -112,6 +112,10 @@
         p:credentialOfferCache-ref="openidvci.CredentialOfferCache"
         p:dataSealer-ref="#{'%{idp.oidc.tokenSealer:shibboleth.oidc.TokenSealer}'.trim()}" />
         
+  <bean id="vci.profileReq.ClientIDLookupStrategy" parent="shibboleth.Functions.Compose"
+        c:g-ref="shibboleth.ClientIDLookupStrategy"
+        c:f-ref="shibboleth.MessageContextLookup.Inbound" />
+        
   <bean id="codeFlow" parent="shibboleth.Conditions.Expression" p:customObject-ref="shibboleth.HttpServletRequestSupplier">
     <constructor-arg>
       <value>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list