[java-idp-plugin-oidc-config] branch main updated: JOIDCCONF-8 - Add new client authentication assertion options

Henri Mikkonen henri.mikkonen at iki.fi
Tue Jun 17 14:48:54 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-plugin-oidc-config.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-config.git;a=commit;h=346511c8c7d6ba9e7c01ce28e5c2e001e4e3bafc

The following commit(s) were added to refs/heads/main by this push:
     new 346511c  JOIDCCONF-8 - Add new client authentication assertion options
346511c is described below

commit 346511c8c7d6ba9e7c01ce28e5c2e001e4e3bafc
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Tue Jun 17 17:48:01 2025 +0300

    JOIDCCONF-8 - Add new client authentication assertion options
    
    https://shibboleth.atlassian.net/browse/JOIDCCONF-8
    
    - Wired md-driven clientAuthenticationJWTType, defaults to null
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml  | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index c8a1659..d38db7f 100644
--- a/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/oidc-config-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -187,6 +187,10 @@
                 <constructor-arg value="%{idp.oauth2.jwtAuth.requireSingleJWTAudience:false}" />
             </bean>
         </property>
+        <property name="clientAuthenticationJWTTypeLookupStrategy">
+            <bean parent="shibboleth.MDDrivenStringProperty" p:propertyName="clientAuthenticationJWTType"
+                p:defaultValue="#{null}" />
+        </property>
     </bean>
 
     <bean id="AbstractMDDrivenOIDCFlowAwareProfile" parent="AbstractMDDrivenOAuthClientAuthenticatableProfile" abstract="true">

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list