[java-oidc-common] branch main updated: Move the feature flag for disallowing essential ACR claim requests.

Henri Mikkonen henri.mikkonen at iki.fi
Thu Jun 12 15:37:58 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-oidc-common.

View the commit online:
http://git.shibboleth.net/view/?p=java-oidc-common.git;a=commit;h=279ceae166b4818be899367ed73c5d46e2d15056

The following commit(s) were added to refs/heads/main by this push:
     new 279ceae  Move the feature flag for disallowing essential ACR claim requests.
279ceae is described below

commit 279ceae166b4818be899367ed73c5d46e2d15056
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Jun 12 18:37:01 2025 +0300

    Move the feature flag for disallowing essential ACR claim requests.
    
    OIDCAuthorizationConfiguration is OP-specific and thus a better location for the flag.
---
 .../oidc/profile/config/OIDCAuthenticationProfileConfiguration.java  | 3 ---
 .../oidc/profile/config/OIDCAuthorizationConfiguration.java          | 5 ++++-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationProfileConfiguration.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationProfileConfiguration.java
index a7c0efa..8d4597d 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationProfileConfiguration.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthenticationProfileConfiguration.java
@@ -34,9 +34,6 @@ public interface OIDCAuthenticationProfileConfiguration extends OAuth2Authorizat
     /** ID for this profile configuration. */
     @Nonnull @NotEmpty public static final String PROFILE_ID = "http://shibboleth.net/ns/profiles/oidc/sso/browser";
 
-    /** Bit constant for essential ACR request feature. */
-    static final int FEATURE_ESSENTIAL_ACR_REQUEST= 0x1;
-    
     /**
      * Should OpenID specific authentication request parameters should be passed in a single, self contained, JWT?
      *
diff --git a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthorizationConfiguration.java b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthorizationConfiguration.java
index 1a2d6aa..f505479 100644
--- a/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthorizationConfiguration.java
+++ b/oidc-common-profile-api/src/main/java/net/shibboleth/oidc/profile/config/OIDCAuthorizationConfiguration.java
@@ -41,7 +41,10 @@ public interface OIDCAuthorizationConfiguration extends OIDCAuthenticationProfil
     
     /** ID for this profile configuration. */
     @Nonnull @NotEmpty public static final String PROFILE_ID = "http://shibboleth.net/ns/profiles/oidc/sso/browser";
-    
+
+    /** Bit constant for essential ACR request feature. */
+    static final int FEATURE_ESSENTIAL_ACR_REQUEST= 0x1;
+
     /**
      * Get whether all acr claim requests should be treated as Essential.
      *

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list