[java-idp-oidc] branch main updated: JOIDC-235 - AdministrativeLogoutConfiguration for OIDC

Henri Mikkonen henri.mikkonen at iki.fi
Wed Jun 18 13:00:11 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=01667df28bb263480a0d4798f6a10ac71fbb3dd2

The following commit(s) were added to refs/heads/main by this push:
     new 01667df2 JOIDC-235 - AdministrativeLogoutConfiguration for OIDC
01667df2 is described below

commit 01667df28bb263480a0d4798f6a10ac71fbb3dd2
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Jun 18 15:59:41 2025 +0300

    JOIDC-235 - AdministrativeLogoutConfiguration for OIDC
    
    https://shibboleth.atlassian.net/browse/JOIDC-235
    
    Updated the resolution phase identifier to 'oauth2/tokenRevocation'.
---
 .../oidc/op/profile/logic/AttributeTokenRevocationCondition.java      | 2 +-
 .../resources/net/shibboleth/idp/module/conf/attribute-resolver.xml   | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/AttributeTokenRevocationCondition.java b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/AttributeTokenRevocationCondition.java
index 71d5e01b..1e3ab2ee 100644
--- a/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/AttributeTokenRevocationCondition.java
+++ b/idp-oidc-extension-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/profile/logic/AttributeTokenRevocationCondition.java
@@ -225,7 +225,7 @@ public class AttributeTokenRevocationCondition extends AbstractInitializableComp
 
         resolutionContext
             .setPrincipal(principal)
-            .setResolutionLabel("tokenRevocation");
+            .setResolutionLabel("oauth2/tokenRevocation");
         assert attributeId != null;
         resolutionContext.setRequestedIdPAttributeNames(CollectionSupport.singletonList(attributeId));
 
diff --git a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/attribute-resolver.xml b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/attribute-resolver.xml
index 103d186f..d621a2f9 100644
--- a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/attribute-resolver.xml
+++ b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/attribute-resolver.xml
@@ -76,12 +76,12 @@
         <AttributeEncoder xsi:type="oidc:OIDCString" name="sub" />
     </AttributeDefinition>
 
-    <AttributeDefinition id="customRevocation" xsi:type="DateTime" epochInSeconds="false" resolutionPhases="tokenRevocation">
+    <AttributeDefinition id="customRevocation" xsi:type="DateTime" epochInSeconds="false" resolutionPhases="oauth2/tokenRevocation">
         <InputAttributeDefinition ref="revocationTime"/>
     </AttributeDefinition>
 
     <AttributeDefinition id="revocationTime" xsi:type="ScriptedAttribute" dependencyOnly="true"
-        resolutionPhases="tokenRevocation" customObjectRef="shibboleth.RelyingPartyIdLookup.Simple">
+        resolutionPhases="oauth2/tokenRevocation" customObjectRef="shibboleth.RelyingPartyIdLookup.Simple">
         <InputAttributeDefinition ref="uid" />
         <Script><![CDATA[
             if (custom.apply(profileContext).equals('mockClientIdActivateRevocationCondition')) {

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list