[java-idp-oidc] branch main updated: JOIDC-235 - AdministrativeLogoutConfiguration for OIDC

Henri Mikkonen henri.mikkonen at iki.fi
Wed Jun 18 12:37:06 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=52716e948ca122923e76ba55a457f73eaf6b9d54

The following commit(s) were added to refs/heads/main by this push:
     new 52716e94 JOIDC-235 - AdministrativeLogoutConfiguration for OIDC
52716e94 is described below

commit 52716e948ca122923e76ba55a457f73eaf6b9d54
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Jun 18 15:36:50 2025 +0300

    JOIDC-235 - AdministrativeLogoutConfiguration for OIDC
    
    https://shibboleth.atlassian.net/browse/JOIDC-235
    
    - Simplified the attribute-resolver based revocation bean name into 'shibboleth.oauth2.AttributeTokenRevocationCondition'
---
 .../src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml     | 2 +-
 .../resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties  | 4 ++--
 .../src/test/resources/net/shibboleth/idp/module/conf/global.xml      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 67a79380..08c9b2b5 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -884,7 +884,7 @@
         </property>
     </bean>
 
-    <bean id="shibboleth.oauth2.revocationCondition.AttributeTokenRevocationCondition"
+    <bean id="shibboleth.oauth2.AttributeTokenRevocationCondition"
         class="net.shibboleth.idp.plugin.oidc.op.profile.logic.AttributeTokenRevocationCondition" lazy-init="true"
         p:attributeResolver-ref="shibboleth.AttributeResolverService"
         p:attributeId="#{'%{idp.oauth2.revocationCondition.attributeId:revocation}'.trim()}">
diff --git a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
index 8ebb849b..798dae56 100644
--- a/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
+++ b/idp-oidc-extension-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/conf/oidc.properties
@@ -199,8 +199,8 @@ idp.oidc.subject.salt = this_too_should_be_ch4ng3d
 #idp.oauth2.revocationMethod = TOKEN
 
 # Revocation condition: bean name that implements BiPredicate<ProfileRequestContext,JWTClaimsSet> for activating condition (defaults to shibboleth.BiConditions.FALSE)
-#idp.oauth2.revocationCondition = shibboleth.oauth2.revocationCondition.AttributeTokenRevocationCondition
-# The attribute ID for the shibboleth.oauth2.revocationCondition.AttributeTokenRevocationCondition
+#idp.oauth2.revocationCondition = shibboleth.oauth2.AttributeTokenRevocationCondition
+# The attribute ID for the shibboleth.oauth2.AttributeTokenRevocationCondition
 #idp.oauth2.revocationCondition.attributeId = revocation
 
 # Bean used to validate audience claim in the JWT authentication.
diff --git a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
index 31b04345..f0408d27 100644
--- a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
+++ b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
@@ -15,7 +15,7 @@
     <bean id="CustomTokenRevocationCondition" parent="shibboleth.BiConditions.Expression"
         c:expression="#custom.test(#input1, #input2)">
         <property name="customObject">
-            <ref bean="shibboleth.oauth2.revocationCondition.AttributeTokenRevocationCondition"/>
+            <ref bean="shibboleth.oauth2.AttributeTokenRevocationCondition"/>
         </property>
     </bean>
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list