[java-idp-plugin-oidc-op-oidfed] branch main updated (841ac99 -> ed95f10)
Henri Mikkonen
henri.mikkonen at iki.fi
Fri Oct 31 14:21:53 UTC 2025
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a change to branch main
in repository java-idp-plugin-oidc-op-oidfed.
from 841ac99 Improved the explicit registration logic
new e1f0d3e Moved trust mark related config options into new OIDFederationTrustMarkValidatingProfileConfiguration
new ed95f10 Improved and harmonised the trust chain signature verification logic
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
...FederationRegistrationProfileConfiguration.java | 30 +-----
...onTrustMarkValidatingProfileConfiguration.java} | 32 +++----
.../MandatoryTrustMarksLookupFunction.java | 6 +-
.../MaximumTrustMarkLifetimeLookupFunction.java | 6 +-
...actTrustEngineSignatureValidationComponent.java | 7 +-
...loadSignatureValidationCredentialResolver.java} | 24 ++---
...efaultProvidedTrustChainValidationStrategy.java | 58 ++++--------
...ustChainSignatureValidationFilterStrategy.java} | 38 ++++++--
...ignatureValidationKeyContainerJwtCriterion.java | 101 +++++++++++++++++++++
.../META-INF/net.shibboleth.idp/postconfig.xml | 12 ++-
.../idp/flows/oidfed/register/register-beans.xml | 33 +++++--
.../flow/oidfed/AbstractFederationFlowTest.java | 35 ++++++-
.../AuthorizeFlowAutomaticRegistrationTest.java | 19 ++++
.../profile/flow/oidfed/RegistrationFlowTest.java | 25 +++--
.../profile/flow/oidfed/ResolveEntityFlowTest.java | 11 +++
.../UserInfoFlowAutomaticRegistrationTest.java | 8 +-
16 files changed, 306 insertions(+), 139 deletions(-)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/{OIDFederationRegistrationProfileConfiguration.java => OIDFederationTrustMarkValidatingProfileConfiguration.java} (71%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{DefaultPayloadJOSEObjectCredentialResolver.java => DefaultPayloadSignatureValidationCredentialResolver.java} (73%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{DefaultTrustAnchorSignatureValidationFilterStrategy.java => DefaultTrustChainSignatureValidationFilterStrategy.java} (61%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/SignatureValidationKeyContainerJwtCriterion.java
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list