[java-idp-plugin-oidc-rp] branch main updated: JOIDCRP-66 - Expose c14n flow list, so it can be separate from the internal list

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-oidc-rp.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-oidc-rp.git;a=commit;h=7762bf5bbe6d7b741c346af078f0104586307e38

The following commit(s) were added to refs/heads/main by this push:
     new 7762bf5  JOIDCRP-66 - Expose c14n flow list, so it can be separate from the internal list
7762bf5 is described below

commit 7762bf5bbe6d7b741c346af078f0104586307e38
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Mar 26 10:23:08 2025 +0000

    JOIDCRP-66 - Expose c14n flow list, so it can be separate from the
    internal list
    
     - Added new property to control post login c14n flows,
    idp.authn.oidc.rp.c14n.postLoginFlows.
    
    https://shibboleth.atlassian.net/browse/JOIDCRP-66
---
 .../flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml    | 2 +-
 .../shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties  | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
index bf24085..f9c56bf 100644
--- a/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
+++ b/idp-oidc-rp-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OIDCRelyingParty/oidc-relying-party-authn-beans.xml
@@ -859,7 +859,7 @@
 
     <bean id="PopulateSubjectCanonicalizationContext"
         class="net.shibboleth.idp.authn.impl.PopulateSubjectCanonicalizationContext" scope="prototype"
-        p:availableFlows-ref="shibboleth.authn.oidc.rp.c14n.PostLoginSubjectCanonicalizationFlows" />
+        p:availableFlows-ref="%{idp.authn.oidc.rp.c14n.postLoginFlows:shibboleth.authn.oidc.rp.c14n.PostLoginSubjectCanonicalizationFlows}" />
 
     <bean id="shibboleth.authn.oidc.rp.c14n.PostLoginSubjectCanonicalizationFlows"
         class="net.shibboleth.shared.spring.factory.CombiningListFactoryBean"
diff --git a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
index af8f889..d3dae91 100644
--- a/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
+++ b/idp-oidc-rp-impl/src/main/resources/net/shibboleth/idp/plugin/authn/oidc/rp/conf/authn/oidc-rp.properties
@@ -40,6 +40,9 @@ idp.authn.oidc.rp.client.redirecturl.allowedOrigins = https://localhost:8443
 ## External controller path. Should not need changing.
 #idp.authn.oidc.rp.externalAuthnPath = /Authn/OIDC/RP
 
+## Bean ID of list of subject c14n flow beans used
+#idp.authn.oidc.rp.c14n.postLoginFlows = shibboleth.authn.oidc.rp.c14n.PostLoginSubjectCanonicalizationFlows
+
 ## Inbuilt C14N options for converting a Subject Identifier into a principal name
 idp.authn.oidc.rp.c14n.subjectidentifier.lowercase = false
 idp.authn.oidc.rp.c14n.subjectidentifier.uppercase = false

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.