[java-idp-oidc] branch main updated: Update reference to the feature flag for disallowing essential ACR claim requests

Henri Mikkonen henri.mikkonen at iki.fi
Thu Jun 12 15:40:19 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=3960d946371b5631708874a9b8a8ea32fb3a4dbc

The following commit(s) were added to refs/heads/main by this push:
     new 3960d946 Update reference to the feature flag for disallowing essential ACR claim requests
3960d946 is described below

commit 3960d946371b5631708874a9b8a8ea32fb3a4dbc
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Jun 12 18:38:59 2025 +0300

    Update reference to the feature flag for disallowing essential ACR claim requests
    
    The constant was moved to OIDCAuthorizationConfiguration in java-oidc-common
---
 .../idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java | 4 ++--
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml  | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
index d57831de..6c09487e 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ProcessRequestedAuthnContext.java
@@ -22,7 +22,7 @@ import net.shibboleth.idp.authn.context.PreferredPrincipalContext;
 import net.shibboleth.idp.authn.context.RequestedPrincipalContext;
 import net.shibboleth.idp.plugin.oidc.op.messaging.context.OIDCAuthenticationResponseContext;
 import net.shibboleth.oidc.authn.principal.AuthenticationContextClassReferencePrincipal;
-import net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration;
+import net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration;
 import net.shibboleth.oidc.profile.config.navigate.AcrClaimAlwaysEssentialLookupFunction;
 import net.shibboleth.profile.config.ProfileConfiguration;
 import net.shibboleth.profile.context.RelyingPartyContext;
@@ -228,7 +228,7 @@ public class ProcessRequestedAuthnContext extends AbstractOIDCAuthenticationResp
             final ProfileConfiguration profileConfig = rpContext==null ? null : rpContext.getProfileConfig();
             if (profileConfig != null) {            
                 if (profileConfig.isFeatureDisallowed(
-                        profileRequestContext, OIDCAuthenticationProfileConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST)) {
+                        profileRequestContext, OIDCAuthorizationConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST)) {
                     log.warn("{} Incoming essential acr request disallowed by profile configuration", getLogPrefix());
                     ActionSupport.buildEvent(profileRequestContext, EventIds.ACCESS_DENIED);
                     return;
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 51e40013..e63f1fc8 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -873,6 +873,6 @@
     </bean>
 
     <util:constant id="OIDC.SSO.FEATURE_ESSENTIAL_ACR_REQUEST"
-        static-field="net.shibboleth.oidc.profile.config.OIDCAuthenticationProfileConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST"/>
+        static-field="net.shibboleth.oidc.profile.config.OIDCAuthorizationConfiguration.FEATURE_ESSENTIAL_ACR_REQUEST"/>
 
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list