[java-idp-oidc] branch main updated: Update reference to the feature flag for disallowing essential ACR claim requests
Henri Mikkonen
henri.mikkonen at iki.fi
Thu Jun 12 15:40:19 UTC 2025
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a commit to branch main
in repository java-idp-oidc.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=3960d946371b5631708874a9b8a8ea32fb3a4dbc
The following commit(s) were added to refs/heads/main by this push:
new 3960d946 Update reference to the feature flag for disallowing essential ACR claim requests
3960d946 is described below
commit 3960d946371b5631708874a9b8a8ea32fb3a4dbc
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Jun 12 18:38:59 2025 +0300
Update reference to the feature flag for disallowing essential ACR claim requests
The constant was moved to OIDCAuthorizationConfiguration in java-oidc-common
---
.../idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java | 4 ++--
.../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
index d57831de..6c09487e 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
@@ -22,7 +22,7 @@ import net.shibboleth.idp.authn.context.PreferredPrincipalContext;
import net.shibboleth.idp.authn.context.RequestedPrincipalContext;
import net.shibboleth.idp.plugin.oidc.op.messaging.context.OIDCAuthenticationResponseContext;
import net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal;
-import net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration;
+import net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration;
import net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction;
import net.shibboleth.profile.config.ProfileConfiguration;
import net.shibboleth.profile.context.RelyingPartyContext;
@@ -228,7 +228,7 @@ public class ProcessRequestedAuthnContext extends AbstractOIDCAuthenticationResp
final ProfileConfiguration profileConfig = rpContext==null ? null : rpContext.getProfileConfig();
if (profileConfig != null) {
if (profileConfig.isFeatureDisallowed(
- profileRequestContext, OIDCAuthenticationProfileConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST)) {
+ profileRequestContext, OIDCAuthorizationConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST)) {
log.warn("{} Incoming essential acr request disallowed by profile configuration", getLogPrefix());
ActionSupport.buildEvent(profileRequestContext, EventIds.ACCESS_DENIED);
return;
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 51e40013..e63f1fc8 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -873,6 +873,6 @@
</bean>
<util:constant id="OIDC.SSO.FEATURE_ESSENTIAL_ACR_REQUEST"
- static-field="net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST"/>
+ static-field="net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST"/>
</beans>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list