[java-idp-oidc] branch main updated: JOIDC-260 - Add an audit field for the RelyingPartyConfiguration bean ID

Codeberg noreply at shibboleth.net
Wed Nov 19 12:11:48 UTC 2025


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/bae9d1e063cfd0b1963f269be49802b2061b9f08

The following commit(s) were added to refs/heads/main by this push:
     new bae9d1e0 JOIDC-260 - Add an audit field for the RelyingPartyConfiguration bean ID
bae9d1e0 is described below

commit bae9d1e063cfd0b1963f269be49802b2061b9f08
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Wed Nov 19 14:11:26 2025 +0200

    JOIDC-260 - Add an audit field for the RelyingPartyConfiguration bean ID
    
    https://shibboleth.atlassian.net/browse/JOIDC-260
    
    Changed PostLookupPopulateAuditContext to use new global bean shibboleth.oidc.DefaultPostLookupAuditExtractors
    - The new bean contains the same sourceMap as new/current (IdP 5.2) shibboleth.DefaultPostLookupAuditExtractors, including RPC
---
 .../META-INF/net.shibboleth.idp/postconfig.xml     | 28 ++++++++++++++++++++++
 .../flows/oidc/abstract/oidc-abstract-beans.xml    |  2 +-
 2 files changed, 29 insertions(+), 1 deletion(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 6383dfc5..cd6daefd 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -419,6 +419,34 @@
         </property>
     </bean>
 
+    <bean id="shibboleth.oidc.DefaultPostLookupAuditExtractors" lazy-init="true"
+            class="org.springframework.beans.factory.config.MapFactoryBean">
+        <property name="sourceMap">
+            <map>
+                <entry key="RPC">
+                    <bean parent="shibboleth.Functions.Compose"
+                            c:f-ref="shibboleth.ChildLookup.RelyingParty">
+                        <constructor-arg name="g">
+                            <bean parent="shibboleth.Functions.Expression"
+                                c:_0="#input?.getConfiguration()?.getId()" />
+                        </constructor-arg>
+                    </bean>
+                </entry>
+                <entry>
+                    <key>
+                        <util:constant static-field="net.shibboleth.idp.saml.profile.SAMLAuditFields.SERVICE_PROVIDER"/>
+                    </key>
+                    <ref bean="shibboleth.RelyingPartyIdLookup.Simple" />
+                </entry>
+                <entry>
+                    <key>
+                        <util:constant static-field="net.shibboleth.idp.saml.profile.SAMLAuditFields.IDENTITY_PROVIDER"/>
+                    </key>
+                    <ref bean="shibboleth.IssuerLookup.Simple" />
+                </entry>
+            </map>
+        </property>
+    </bean>
 
     <bean id="shibboleth.oidc.DefaultPostResponseAuditExtractors"
             class="org.springframework.beans.factory.config.MapFactoryBean">
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/abstract/oidc-abstract-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/abstract/oidc-abstract-beans.xml
index af5f5bf7..aa8f2367 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/abstract/oidc-abstract-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/abstract/oidc-abstract-beans.xml
@@ -106,7 +106,7 @@
         p:fieldExtractors="#{getObject('shibboleth.oidc.PostDecodeAuditExtractors') ?: getObject('shibboleth.oidc.DefaultPostDecodeAuditExtractors')}" />
 
     <bean id="PostLookupPopulateAuditContext" parent="shibboleth.AbstractPopulateAuditContext"
-        p:fieldExtractors="#{getObject('shibboleth.oidc.PostLookupAuditExtractors') ?: getObject('shibboleth.DefaultPostLookupAuditExtractors')}" />
+        p:fieldExtractors="#{getObject('shibboleth.oidc.PostLookupAuditExtractors') ?: getObject('shibboleth.oidc.DefaultPostLookupAuditExtractors')}" />
 
     <bean id="PostResponsePopulateAuditContext" parent="shibboleth.AbstractPopulateAuditContext"
         p:fieldExtractors="#{getObject('shibboleth.oidc.PostResponseAuditExtractors') ?: getObject('shibboleth.oidc.DefaultPostResponseAuditExtractors')}" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list