[java-identity-provider] branch main updated: Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=efcbddc6e10bd0b3413b216887aad0297f5638a9

The following commit(s) were added to refs/heads/main by this push:
     new efcbddc6e Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.
efcbddc6e is described below

commit efcbddc6e10bd0b3413b216887aad0297f5638a9
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Fri Mar 21 23:04:24 2025 -0400

    Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.
    
    We don't really support that binding there and with the changes around
    the decoder and handler in OpenSAML, it now it won't even run at all
    on regular HTTP POST binding (and was already broken-ish anyway).
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml     | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index 8a1a164ee..9f2e5a342 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -311,10 +311,6 @@
                             p:messageLifetime="%{idp.policy.messageLifetime:PT3M}"
                             p:clockSkew="%{idp.policy.clockSkew:PT3M}" />
                         <bean class="org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler" scope="prototype" />
-                        <bean class="org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler" scope="prototype"
-                            p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
-                            p:parser-ref="shibboleth.ParserPool"
-                            p:keyInfoResolver-ref="shibboleth.KeyInfoCredentialResolver" />
                         <bean class="org.opensaml.messaging.handler.impl.CheckExpectedIssuer" scope="prototype"
                             p:issuerLookupStrategy-ref="InboundEntityIDLookup"
                             p:expectedIssuerLookupStrategy-ref="OutboundEntityIDLookup" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.