[java-identity-provider] branch maint-5.1 updated: Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch maint-5.1
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=970676873007449e0ce7e2ece81ef04500d1004d

The following commit(s) were added to refs/heads/maint-5.1 by this push:
     new 970676873 Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.
970676873 is described below

commit 970676873007449e0ce7e2ece81ef04500d1004d
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Fri Mar 21 23:04:24 2025 -0400

    Remove SAML2HTTPPostSimpleSignSecurityHandler from SAML AuthN flow.
    
    We don't really support that binding there and with the changes around
    the decoder and handler in OpenSAML, it now it won't even run at all
    on regular HTTP POST binding (and was already broken-ish anyway).
---
 .../resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml     | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
index a6205c0fa..e6d96352b 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/flows/authn/saml-authn-beans.xml
@@ -311,10 +311,6 @@
                             p:messageLifetime="%{idp.policy.messageLifetime:PT3M}"
                             p:clockSkew="%{idp.policy.clockSkew:PT3M}" />
                         <bean class="org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler" scope="prototype" />
-                        <bean class="org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler" scope="prototype"
-                            p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier"
-                            p:parser-ref="shibboleth.ParserPool"
-                            p:keyInfoResolver-ref="shibboleth.KeyInfoCredentialResolver" />
                         <bean class="org.opensaml.messaging.handler.impl.CheckExpectedIssuer" scope="prototype"
                             p:issuerLookupStrategy-ref="InboundEntityIDLookup"
                             p:expectedIssuerLookupStrategy-ref="OutboundEntityIDLookup" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.