[java-idp-plugin-vci] branch dev/PROFILES_AND_DPOP_AND_NONCE updated: Correct content

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/PROFILES_AND_DPOP_AND_NONCE
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/c36e7dc8f1770b0ca7abc19006802ff171d89f1d

The following commit(s) were added to refs/heads/dev/PROFILES_AND_DPOP_AND_NONCE by this push:
     new c36e7dc  Correct content
c36e7dc is described below

commit c36e7dc8f1770b0ca7abc19006802ff171d89f1d
Author: jlauros <janne.lauros at csc.fi>
AuthorDate: Wed Nov 19 16:21:40 2025 +0200

    Correct content
---
 .../META-INF/net.shibboleth.idp/postconfig.xml     | 51 ++--------------------
 1 file changed, 4 insertions(+), 47 deletions(-)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index bb0eba3..c3a92d6 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -16,54 +16,11 @@
         class="org.springframework.context.support.PropertySourcesPlaceholderConfigurer"
         p:placeholderPrefix="%{" p:placeholderSuffix="}" />
 
-    
-    <bean id="AbstractVCIProfile" abstract="true"
-        p:issuer="#{getObject('shibboleth.oidc.issuer')}"
-        p:preauthorizedCodeLifetime="%{openidvci.preauthorizedCode:PT10M}"
-        p:preauthorizedCodeLength="%{openidvci.preauthorizedCode.defaultLength:0}"        
-        p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
-        p:forcePKCE="%{idp.oidc.forcePKCE:false}"
-        p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}"
-        p:accessTokenType="%{idp.oauth2.accessToken.type:}"
-        p:accessTokenLifetime="%{idp.oidc.accessToken.defaultLifetime:PT10M}"
-        p:tokenEndpointAuthMethod="%{idp.authn.oidc.rp.client.authenticationMethod:client_secret_basic}"
-        p:securityConfiguration-ref="%{idp.security.oidc.config:shibboleth.oidc.DefaultSecurityConfiguration}"
-        p:claimsValidator="#{getObject('DefaultJWTClaimsValidator')}"
-        p:dpopProofClaimsValidator="#{getObject('DefaultDPoPProofClaimsValidator')}"
-        p:dpopProofSignatureValidationConfiguration="#{getObject('DPoPSignatureValidationConfiguration')}"
-        p:dpopProofNonceGenerator="#{getObject('DefaultOAuth2DPoPNonceGenerator')}" />
-    
-        
-    <bean id="OpenID.VCI.CredentialOffer" parent="AbstractVCIProfile" lazy-init="true"
-        class="org.geant.shibboleth.plugin.openidvci.config.impl.DefaultOpenIDVCICredentialOfferConfiguration" />
-
-    <bean id="OpenID.VCI.Token" parent="AbstractVCIProfile" lazy-init="true"
-        class="org.geant.shibboleth.plugin.openidvci.config.impl.DefaultOpenIDVCITokenConfiguration" />
-
-    <bean id="OpenID.VCI.Credentials" parent="AbstractVCIProfile" lazy-init="true"
-        class="org.geant.shibboleth.plugin.openidvci.config.impl.DefaultOpenIDVCICredentialsConfiguration" />
-
-    <bean id="OpenID.VCI.Nonce" parent="AbstractVCIProfile" lazy-init="true"
-        class="org.geant.shibboleth.plugin.openidvci.config.impl.DefaultOpenIDVCINonceConfiguration"
-        p:dpopProofNonceGenerator="#{getObject('DefaultOpenIDVCINonceGenerator')}" />
+    <bean id="openidvci.PublicClientValidator"
+        class="org.geant.shibboleth.plugin.openidvci.authn.impl.WalletCredentialValidator" />
         
-    <!-- Property-based definition of login flows for OAuth endpoints. -->
-    <bean id="openidvci.PotentialFlows"
-        class="org.springframework.beans.factory.config.ListFactoryBean"
-        p:sourceList="#{getObject('shibboleth.AuthenticationFlowDescriptorManager').getComponents().?[id matches 'authn/(' + '%{openidvci.authn.flows:OAuth2Client}'.trim() + ')']}" />
+    <bean id="openidvci.AuthzCodeManipulationStrategy"
+        class="org.geant.shibboleth.plugin.openidvci.profile.logic.AuthorizationCodeManipulationStrategy" />
     
-    
-    <!-- We use special DPoP Nonce generator for Nonce endpoint. -->
-    <!-- The generator does not tie client id to nonce to accomodate unprotected Nonce endpoint. -->    
-    <bean id="DefaultOpenIDVCINonceGenerator" parent="DefaultOAuth2DPoPNonceGenerator" lazy-init="true"
-        p:relyingPartyIdLookupStrategy-ref="openidvci.RelyingPartyForNonce">
-    </bean>
-
-    <!-- Mock relying party for Nonce generation. -->
-    <bean id="openidvci.RelyingPartyForNonce" parent="shibboleth.Functions.Constant">
-        <constructor-arg>
-            <bean class="java.lang.String" c:_0="mockRelyingParty" />
-         </constructor-arg>
-    </bean>
 
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.