[java-identity-provider] branch dev/JPAR-234 updated (c7aa7145b -> 6785766cb)
Ian Young
ian at iay.org.uk
Thu Mar 13 13:48:36 UTC 2025
This is an automated email from the git hooks/post-receive script.
iay pushed a change to branch dev/JPAR-234
in repository java-identity-provider.
discard c7aa7145b JPAR-234 - Track Spring Framework 7.0
add b9c144a10 IDP-2352 - SOAP client wiring references old bean ID
add d889d5123 IDP-2212 - Warning interrupt causing runtime exception at times
add bd59ec0fc IDP-2348 - Siganling authn/FlowName event out of login flow crashes
add 0d71f2f25 IDP-2349 - Attribute consent not working in CAS
add 36a992abb IDP-2358 - Consent condition on back-channel flows invoked incorrectly
add cfa347baa JSPROF-10 - Enable loop detection via Condition
add 0eabeeab5 IDP-2330 - Hook for populating group ID in attribute resolution context
add 95dca3f02 Change comment about the provenance of the WIX signing cert
add e779bb38f IDP-2357 - Predicate to check contents of authenticated Subject
add d1a13c6db Work around sealed package.
add b99e0051e IDP-2255 - Warn if defaultAuthnMethods used without disallowedFeatures
add e793da6e0 Adjust test to reflect different timing for detection.
add 5a38f0bf3 IDP-2310 - DumpConfig is causing a Jackson nesting violation
add ecdc99900 IDP-2310 - DumpConfig is causing a Jackson nesting violation
add 175afe25a IDP-2319- Login fows should support a dedicated c14n list
add 3f0eee6ae Fix failing tests due to stronger ID enforcement.
add 35df0aad1 Fix more c14n flow prefixes.
add 6a41d52e1 Sigh, missed a commit.
add 0c0581726 IDP-2353 - C14n flow that runs a deployer-defined bean
add 28a8aa2ef IDP-2353 - C14n flow that runs a deployer-defined bean
add 38f1c142e IDP-2253 - C14n flow that runs a deployer-defined bean
add 2bd2a3de0 Failed to remove "legacy" deprecated flow.
add cabf928bd IDP-2353 - C14n flow that runs a deployer-defined bean
add 7fe2c97c1 IDP-2353 - C14n flow that runs a deployer-defined bean
add ad480dd89 Allow empty source ID list, allowing for default instantiation.
add 592b3e17a IDP-2353 - C14n flow that runs a deployer-defined bean
add 183acdb83 Adjust logging to warn when no flows are available.
add d200fcf12 IDP-2353 - C14n flow that runs a deployer-defined bean
add eb751e32c Simplify default config for new installs.
add c4d5c503f Backstop attribute source list with attribute resolve list.
add b6f9535d6 Remove property backstop after change to Java class.
add 38bb32d29 IDP-2355 Move to Wix 5
add afa184c88 IDP-2353 - C14n flow that runs a deployer-defined bean
add 221e8b1af IDP-2309 - External Authn API should support direct event signaling
add ccd4309e7 Fix map collisions in tests.
add 4a105c40f IDP-2351 - Allow per-AuthenticationResult lifetime/timeout policies
add a14cede77 IDP-2351 - Allow per-AuthenticationResult lifetime/timeout policies
add aaa884ef2 Undo API change.
new 6785766cb JPAR-234 - Track Spring Framework 7.0
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (c7aa7145b)
\
N -- N -- N refs/heads/dev/JPAR-234 (6785766cb)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../admin/BasicAdministrativeFlowDescriptor.java | 38 ++-
.../shibboleth/idp/admin/impl/OutputConfig.java | 82 +++++--
...tion.java => AbstractSubjectCanonicalizer.java} | 120 ++++-----
.../idp/authn/AuthenticationFlowDescriptor.java | 42 +++-
.../shibboleth/idp/authn/AuthenticationResult.java | 90 +++++++
.../net/shibboleth/idp/authn/AuthnEventIds.java | 10 +-
.../idp/authn/ExternalAuthentication.java | 26 +-
.../SubjectCanonicalizationFlowDescriptor.java | 76 +++++-
.../shibboleth/idp/authn/SubjectCanonicalizer.java | 42 ++++
.../context/ExternalAuthenticationContext.java | 91 ++++++-
.../context/SubjectCanonicalizationContext.java | 4 +-
.../AbstractAuthenticationResultPredicate.java | 178 ++++++++++++++
.../logic/AuthenticationResultPredicate.java | 29 +--
.../context/logic/PrincipalInResultPredicate.java | 78 ++++++
.../idp/authn/context/logic}/package-info.java | 4 +-
.../AttributeSourcedSubjectCanonicalization.java | 273 ++++++++++++++++-----
...ibuteSourcedSubjectCanonicalizationAction.java} | 9 +-
.../DefaultAuthenticationResultSerializer.java | 26 ++
.../idp/authn/impl/ExternalAuthenticationImpl.java | 72 +++---
.../idp/authn/impl/FinalizeAuthentication.java | 20 +-
.../impl/FunctionSubjectCanonicalization.java | 76 ++++++
.../impl/InitializeRequestedPrincipalContext.java | 17 +-
.../PopulateSubjectCanonicalizationContext.java | 81 +++++-
.../idp/authn/impl/SelectAuthenticationFlow.java | 4 +-
.../impl/SelectSubjectCanonicalizationFlow.java | 70 ++++--
.../authn/impl/SimpleSubjectCanonicalization.java | 128 +++-------
...jectCanonicalizationFlowDescriptorManager.java} | 12 +-
.../authn/impl/ValidateExternalAuthentication.java | 36 ++-
.../authn/impl/X500SubjectCanonicalization.java | 163 +++++-------
.../testing/AuthenticationResultPredicateTest.java | 92 +++++++
.../testing/PrincipalInResultPredicateTest.java | 106 ++++++++
...eSourcedSubjectCanonicalizationActionTest.java} | 12 +-
...ttributeSourcedSubjectCanonicalizationTest.java | 136 ++++++----
.../DefaultAuthenticationResultSerializerTest.java | 37 +++
.../InitializeRequestedPrincipalContextTest.java | 7 +
...PopulateSubjectCanonicalizationContextTest.java | 11 +-
.../SelectSubjectCanonicalizationFlowTest.java | 19 +-
.../impl/SimpleSubjectCanonicalizationTest.java | 53 ++--
.../impl/ValidateExternalAuthenticationTest.java | 42 +++-
.../impl/X500SubjectCanonicalizationTest.java | 107 ++++----
.../SubjectCanonicalizationFlowDescriptorTest.java | 10 +-
.../simpleAuthenticationResultWithOptional.json | 1 +
.../cas/config/AbstractProtocolConfiguration.java | 34 +++
.../net/shibboleth/idp/conf/conditions.xml | 7 +-
.../shibboleth/idp/conf/relying-party-mddriven.xml | 17 +-
.../net/shibboleth/idp/conf/soap-client.xml | 2 +-
.../shibboleth/idp/conf/subject-c14n-system.xml | 197 ++++++++++-----
.../net/shibboleth/idp/conf/webflow-config.xml | 17 --
.../idp/flows/authn/external-authn-beans.xml | 5 +-
.../idp/flows/authn/function-authn-beans.xml | 5 +-
.../idp/flows/authn/ipaddress-authn-beans.xml | 5 +-
.../shibboleth/idp/flows/authn/mfa-authn-beans.xml | 6 +-
.../idp/flows/authn/password-authn-beans.xml | 6 +-
.../idp/flows/authn/remoteuser-authn-beans.xml | 5 +-
.../authn/remoteuser-internal-authn-beans.xml | 5 +-
.../idp/flows/authn/saml-authn-beans.xml | 5 +-
.../idp/flows/authn/spnego-authn-beans.xml | 5 +-
.../idp/flows/authn/x509-authn-beans.xml | 5 +-
.../idp/flows/authn/x509-internal-authn-beans.xml | 5 +-
.../c14n/attribute-sourced-subject-c14n-beans.xml | 2 +-
.../idp/flows/c14n/simple-subject-c14n-beans.xml | 24 --
.../idp/flows/c14n/simple-subject-c14n-flow.xml | 17 --
.../idp/flows/c14n/subject-c14n-flow.xml | 7 +
.../flows/c14n/subject-c14n-saml-default-beans.xml | 83 -------
.../flows/c14n/subject-c14n-saml-default-flow.xml | 23 --
.../idp/flows/c14n/x500-subject-c14n-beans.xml | 32 ---
.../idp/flows/c14n/x500-subject-c14n-flow.xml | 17 --
.../idp/flows/cas/validate-abstract-beans.xml | 2 +
.../idp/flows/cas/validate-abstract-flow.xml | 2 +-
.../idp/flows/intercept/warning-flow.xml | 2 +-
.../idp/flows/saml/saml1/attribute-query-flow.xml | 2 +-
.../idp/flows/saml/saml2/attribute-query-flow.xml | 2 +-
.../idp/module/conf/authn/authn.properties | 25 +-
.../idp/module/conf/c14n/subject-c14n.properties | 11 +-
.../idp/module/conf/c14n/subject-c14n.xml | 43 +---
.../src/test/resources/test/override-beans.xml | 35 +--
idp-msi/src/main/wix/ShibbolethIdP-gui.wxs | 2 +-
idp-msi/src/main/wix/idp.vcxproj | 10 +-
idp-msi/src/main/wix/nuget.config | 2 +-
.../idp/profile/logic/LoopDetectionPredicate.java | 10 +-
.../idp/profile/impl/FilterAttributes.java | 7 +
.../idp/profile/impl/ResolveAttributes.java | 7 +
.../saml/nameid/AbstractNameIDCanonicalizer.java | 94 +++++++
.../shibboleth/idp/saml/nameid/NameIDDecoder.java | 2 +
.../nameid/impl/BaseCryptoTransientDecoder.java | 44 ++--
.../nameid/impl/CryptoTransientNameIDDecoder.java | 3 +-
.../impl/CryptoTransientNameIdentifierDecoder.java | 3 +-
.../saml/nameid/impl/NameIDCanonicalization.java | 223 ++++++-----------
.../impl/NameIdentifierCanonicalization.java | 221 +++++------------
.../nameid/impl/StoredPersistentIdDecoder.java | 13 +-
.../impl/AttributeQueryProfileConfiguration.java | 44 ++++
.../impl/BrowserSSOProfileConfiguration.java | 33 +++
.../impl/AttributeQueryProfileConfiguration.java | 42 +++-
.../impl/BrowserSSOProfileConfiguration.java | 33 +++
.../impl/CryptoTransientNameIDDecoderTest.java | 25 +-
.../CryptoTransientNameIdentifierDecoderTest.java | 17 +-
.../nameid/impl/NameIDCanonicalizationTest.java | 88 ++++---
.../impl/NameIdentifierCanonicalizationTest.java | 100 +++-----
.../idp/saml/nameid/impl/TransientDecoderTest.java | 16 +-
.../idp/session/impl/StorageBackedIdPSession.java | 8 +-
100 files changed, 2709 insertions(+), 1528 deletions(-)
copy idp-authn-api/src/main/java/net/shibboleth/idp/authn/{AbstractExtractionAction.java => AbstractSubjectCanonicalizer.java} (60%)
create mode 100644 idp-authn-api/src/main/java/net/shibboleth/idp/authn/SubjectCanonicalizer.java
create mode 100644 idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/logic/AbstractAuthenticationResultPredicate.java
copy idp-testing/src/main/java/net/shibboleth/idp/saml/profile/testing/ActionTestSupportAction.java => idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/logic/AuthenticationResultPredicate.java (52%)
create mode 100644 idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/logic/PrincipalInResultPredicate.java
copy {idp-admin-impl/src/main/java/net/shibboleth/idp/admin/impl => idp-authn-api/src/main/java/net/shibboleth/idp/authn/context/logic}/package-info.java (86%)
copy idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/{AttributeSourcedSubjectCanonicalization.java => AttributeSourcedSubjectCanonicalizationAction.java} (97%)
create mode 100644 idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/FunctionSubjectCanonicalization.java
copy idp-authn-impl/src/main/java/net/shibboleth/idp/authn/impl/{AuthenticationFlowDescriptorManager.java => SubjectCanonicalizationFlowDescriptorManager.java} (68%)
create mode 100644 idp-authn-impl/src/test/java/net/shibboleth/idp/authn/context/logic/testing/AuthenticationResultPredicateTest.java
create mode 100644 idp-authn-impl/src/test/java/net/shibboleth/idp/authn/context/logic/testing/PrincipalInResultPredicateTest.java
copy idp-authn-impl/src/test/java/net/shibboleth/idp/authn/impl/{AttributeSourcedSubjectCanonicalizationTest.java => AttributeSourcedSubjectCanonicalizationActionTest.java} (95%)
create mode 100644 idp-authn-impl/src/test/resources/net/shibboleth/idp/authn/impl/simpleAuthenticationResultWithOptional.json
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/simple-subject-c14n-beans.xml
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/simple-subject-c14n-flow.xml
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/subject-c14n-saml-default-beans.xml
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/subject-c14n-saml-default-flow.xml
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/x500-subject-c14n-beans.xml
delete mode 100644 idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/c14n/x500-subject-c14n-flow.xml
create mode 100644 idp-saml-api/src/main/java/net/shibboleth/idp/saml/nameid/AbstractNameIDCanonicalizer.java
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list