[java-idp-plugin-oidc-rp] branch main updated: Update config and commons version. Fix javadoc.

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=1b9aac3c99f9b4cb0552d99adfab0233681f1032

The following commit(s) were added to refs/heads/main by this push:
     new 1b9aac3  Update config and commons version. Fix javadoc.
1b9aac3 is described below

commit 1b9aac3c99f9b4cb0552d99adfab0233681f1032
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Jun 23 12:38:32 2025 +0100

    Update config and commons version. Fix javadoc.
    
     - also remove new JWT audience property as this will be set in an
    rp-config.
---
 .../rp/impl/InitializeOAuth2ClientAuthenticationMethodHandler.java | 7 ++++---
 .../idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties         | 5 -----
 pom.xml                                                            | 4 ++--
 3 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/InitializeOAuth2ClientAuthenticationMethodHandler.java b/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/InitializeOAuth2ClientAuthenticationMethodHandler.java
index 43bc7a5..0a5755a 100644
--- a/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/InitializeOAuth2ClientAuthenticationMethodHandler.java
+++ b/idp-oidc-rp-impl/src/main/java/net/shibboleth/idp/plugin/authn/oidc/rp/impl/InitializeOAuth2ClientAuthenticationMethodHandler.java
@@ -392,9 +392,10 @@ public class InitializeOAuth2ClientAuthenticationMethodHandler extends AbstractM
     }
 
     /**
-     * Build the claim values required for a client authentication bearer JWT. By default, the audience is set to the
-     * issuer identifier of the OP, but there is a flag that allows this to be changed to the token endpoint URL, 
-     * which was the previous default.  
+     * Build the claim values required for a client authentication bearer JWT. The audience is either set to the
+     * issuer identifier of the OP if {@link 
+     * OIDCAuthenticationRelyingPartyProfileConfiguration#isUseTargetedEndpointAsJWTAudience(ProfileRequestContext)} is 
+     * false, or the token endpoint URL if true.  
      * 
      * @param messageContext the message context
      * 
diff --git a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
index e0fd8af..d3dae91 100644
--- a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
+++ b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
@@ -18,11 +18,6 @@ idp.authn.oidc.rp.client.redirecturl.allowedOrigins = https://localhost:8443
 ## Client authentication method.
 #idp.authn.oidc.rp.client.authenticationMethod = client_secret_basic
 #idp.authn.oidc.rp.client.authenticationMethod.jwt.expiryOffset = PT30S
-
-## Should the client assertion JWT audience claim be based on the token endpoint URL? The issuer identifier of the OP 
-## is used by default (when set to false). This is an override to revert to the previous, insecure, value.
-#idp.authn.oidc.rp.client.authenticationMethod.tokenEndpointAsAudience = false
-
 ## Comma seperated list of additional scopes e.g. profile or email. The openid scope is added by default
 #idp.authn.oidc.rp.client.scopes =
 
diff --git a/pom.xml b/pom.xml
index 53f06e3..32a04e4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -26,9 +26,9 @@
         <shib-shared.testing.version>9.0.0</shib-shared.testing.version>
         <okhttp3.tls.version>4.9.3</okhttp3.tls.version>        
         <oidc-config.groupId>net.shibboleth.idp.plugin.config.oidc</oidc-config.groupId>
-        <oidc-config.version>3.0.0-SNAPSHOT</oidc-config.version>
+        <oidc-config.version>3.0.0</oidc-config.version>
         <oidc-common.groupId>net.shibboleth.oidc</oidc-common.groupId>
-        <oidc-common.version>3.3.0-SNAPSHOT</oidc-common.version>
+        <oidc-common.version>3.3.0</oidc-common.version>
         <shib-shared.groupId>net.shibboleth</shib-shared.groupId>
         <shib-shared.version>9.0.0</shib-shared.version>
         <shib-profile.groupId>net.shibboleth</shib-profile.groupId>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.