[java-idp-plugin-oidc-config] branch main updated: JOIDCCONF-7 - Add OIDC.SSO.MDDriven profile bean

[Henri Mikkonen]

This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=61c75e365493c1cd92453be2d3229c82acf02633

The following commit(s) were added to refs/heads/main by this push:
     new 61c75e3  JOIDCCONF-7 - Add OIDC.SSO.MDDriven profile bean
61c75e3 is described below

commit 61c75e365493c1cd92453be2d3229c82acf02633
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Jun 6 11:00:09 2025 +0300

    JOIDCCONF-7 - Add OIDC.SSO.MDDriven profile bean
    
    https://shibboleth.atlassian.net/browse/JOIDCCONF-7
    
    - Move md-driven 'useTargetedEndpointAsJWTAudiencePredicate' to AbstractMDDrivenOAuthClientAuthenticatableProfile
      - AbstractMDDrivenOIDCSSOProfile didn't cover neither md-driven introspection nor revocation profiles
---
 .../shibboleth/idp/service/relying-party/postconfig.xml  | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 3154969..d363b79 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -170,6 +170,14 @@
                 p:propertyType="#{T(java.util.function.Function)}"
                 p:defaultValue="#{getObject('DefaultOAuth2DPoPNonceGenerator')}" />
         </property>
+        <property name="useTargetedEndpointAsJWTAudiencePredicate">
+            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
+                <constructor-arg>
+                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="useTargetedEndpointAsJWTAudience" />
+                </constructor-arg>
+                <constructor-arg value="%{idp.oauth2.jwtAuth.targetedEndpointAsJWTAudience:false}" />
+            </bean>
+        </property>
     </bean>
 
     <bean id="AbstractMDDrivenOIDCFlowAwareProfile" parent="AbstractMDDrivenOAuthClientAuthenticatableProfile" abstract="true">
@@ -286,14 +294,6 @@
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="tokenEndpointAuthMethod"
                 p:defaultValue="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}" />
         </property>
-        <property name="useTargetedEndpointAsJWTAudiencePredicate">
-            <bean class="net.shibboleth.shared.logic.PredicateSupport" factory-method="fromFunction">
-                <constructor-arg>
-                    <bean parent="shibboleth.MDDrivenBoolProperty" p:propertyName="useTargetedEndpointAsJWTAudience" />
-                </constructor-arg>
-                <constructor-arg value="%{idp.oauth2.jwtAuth.targetedEndpointAsJWTAudience:false}" />
-            </bean>
-        </property>
         <property name="clientIdLookupStrategy">
             <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="clientId"
                 p:defaultValue="#{%{idp.authn.oidc.rp.provider.discoveryRequired:false} == true ? null : '%{idp.authn.oidc.rp.client.clientId:}'}" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.