[java-idp-plugin-oidc-config] branch main updated: JOIDCCONF-8 - Add new client authentication assertion options

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=a0870423619f1c855db2ddb9cc0cea6509e603cb

The following commit(s) were added to refs/heads/main by this push:
     new a087042  JOIDCCONF-8 - Add new client authentication assertion options
a087042 is described below

commit a0870423619f1c855db2ddb9cc0cea6509e603cb
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Jun 4 14:39:18 2025 +0100

    JOIDCCONF-8 - Add new client authentication assertion options
    
     - add useTargetedEndpointAsJWTAudience property.
    
    https://shibboleth.atlassian.net/browse/JOIDCCONF-8
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml     | 1 +
 1 file changed, 1 insertion(+)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 7b4e083..1a53c70 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -51,6 +51,7 @@
         p:refreshTokenChainLifetime="%{idp.oidc.refreshToken.defaultChainLifetime:PT2H}"
         p:alwaysIncludedAttributes="%{idp.oidc.alwaysIncludedAttributes:}"        
         p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
+        p:useTargetedEndpointAsJWTAudience="%{idp.oauth2.jwtAuth.targetedEndpointAsJWTAudience:false}"
         p:clientId="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}"
         p:clientCredential="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? {null} : getObject('shibboleth.authn.oidc.rp.DefaultCredential')}"
         p:unregisteredClientPolicy="#{getObject('shibboleth.oidc.DefaultUnregisteredClientPolicy')}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.