[java-identity-provider] branch main updated: JSATTR-6: SAML AttributeQuery DataConnector

[Brent Putman]

This is an automated email from the git hooks/post-receive script.

putmanb pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
https://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=0eb6f14c53a0e4d7183b09e6d97db1d7d7857b94

The following commit(s) were added to refs/heads/main by this push:
     new 0eb6f14c5 JSATTR-6: SAML AttributeQuery DataConnector
0eb6f14c5 is described below

commit 0eb6f14c53a0e4d7183b09e6d97db1d7d7857b94
Author: Brent Putman <putmanb at georgetown.edu>
AuthorDate: Thu Nov 6 18:39:52 2025 -0500

    JSATTR-6: SAML AttributeQuery DataConnector
    
    Make permanent the change to attribute-resolver-system.xml around
    SignatureTrustEngine for Assertion validator to inject null. It's
    intended we resolve this dynamically, so the validator one is
    unneeded.
---
 .../resources/net/shibboleth/idp/conf/attribute-resolver-system.xml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/attribute-resolver-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/attribute-resolver-system.xml
index 0da782142..2f71cf733 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/attribute-resolver-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/attribute-resolver-system.xml
@@ -52,10 +52,8 @@
         <!-- Generic AssertionValidator -->
         <constructor-arg index="3" value="#{getObject('%{idp.attribute-resolver.dc.SAML.assertionValidator:}'.trim())}" />
         <!-- SignatureTrustEngine  -->
-        <!--  TODO this isn't working, prob b/c bean not in-scope for attribute resolver
-        <constructor-arg index="4" ref="shibboleth.ChainingSignatureTrustEngine" />
-        -->
-        <constructor-arg index="4" value="#{null}" /> <!-- TODO remove this when issue is fixed -->
+        <!-- This is null b/c in this case we use a dynamically-resolved engine in the ValidationContext -->
+        <constructor-arg index="4" value="#{null}" />
         <!-- SignaturePrevalidator -->
         <constructor-arg index="5">
             <bean class="org.opensaml.saml.security.impl.SAMLSignatureProfileValidator" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.