[java-idp-oidc] 02/04: JOIDC-252 - Mechanism for custom metadata lookup flows
Henri Mikkonen
henri.mikkonen at iki.fi
Mon Sep 8 10:53:14 UTC 2025
This is an automated email from the git hooks/post-receive script.
hjmikkon pushed a commit to branch main
in repository java-idp-oidc.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=4362d85a39d9665d066235f9c8f66f58e67a3297
commit 4362d85a39d9665d066235f9c8f66f58e67a3297
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Mon Sep 8 13:13:02 2025 +0300
JOIDC-252 - Mechanism for custom metadata lookup flows
https://shibboleth.atlassian.net/browse/JOIDC-252
Updated the metadata-lookup flow to attempt extension flows only if OIDC nor SAML couldn't find any metadata records
---
.../idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml | 4 ++--
.../shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java | 2 --
2 files changed, 2 insertions(+), 4 deletions(-)
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
index cb8cc3fb..a8870ae6 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
@@ -17,7 +17,7 @@
<decision-state id="CheckIfFoundFromClientInformationService">
<if test="opensamlProfileRequestContext.ensureSubcontext(T(net.shibboleth.profile.context.RelyingPartyContext)).isVerified()"
- then="SelectMetadataLookupExtensionFlow" else="LookupFromSAMLMetadataService" />
+ then="SelectConfiguration" else="LookupFromSAMLMetadataService" />
</decision-state>
<action-state id="LookupFromSAMLMetadataService">
@@ -37,7 +37,7 @@
<evaluate expression="PopulateOIDCMetadataContext" />
<evaluate expression="InitializeRelyingPartyContextFromSAMLPeer" />
<evaluate expression="'proceed'" />
- <transition on="proceed" to="SelectMetadataLookupExtensionFlow" />
+ <transition on="proceed" to="SelectConfiguration" />
</action-state>
<action-state id="SelectMetadataLookupExtensionFlow">
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
index 8eb034b1..cb9d4600 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
@@ -2319,7 +2319,6 @@ public class AuthorizeFlowTest extends AbstractOidcFlowTest {
new Pair<>("scope", "openid profile"),
new Pair<>("redirect_uri", redirectUri)));
request.setMethod("GET");
- storeMetadata(storageService, clientId, clientSecret, scope, redirectUri);
initializeThreadLocals();
@@ -2341,7 +2340,6 @@ public class AuthorizeFlowTest extends AbstractOidcFlowTest {
new Pair<>("scope", "openid profile"),
new Pair<>("redirect_uri", redirectUri)));
request.setMethod("GET");
- storeMetadata(storageService, clientId, clientSecret, scope, redirectUri);
initializeThreadLocals();
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list