[java-idp-oidc] 02/04: JOIDC-252 - Mechanism for custom metadata lookup flows

Henri Mikkonen henri.mikkonen at iki.fi
Mon Sep 8 10:53:14 UTC 2025


This is an automated email from the git hooks/post-receive script.

hjmikkon pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-oidc.git;a=commit;h=4362d85a39d9665d066235f9c8f66f58e67a3297

commit 4362d85a39d9665d066235f9c8f66f58e67a3297
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Mon Sep 8 13:13:02 2025 +0300

    JOIDC-252 - Mechanism for custom metadata lookup flows
    
    https://shibboleth.atlassian.net/browse/JOIDC-252
    
    Updated the metadata-lookup flow to attempt extension flows only if OIDC nor SAML couldn't find any metadata records
---
 .../idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml           | 4 ++--
 .../shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java | 2 --
 2 files changed, 2 insertions(+), 4 deletions(-)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
index cb8cc3fb..a8870ae6 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/metadata-lookup/metadata-lookup-flow.xml
@@ -17,7 +17,7 @@
 
     <decision-state id="CheckIfFoundFromClientInformationService">
         <if test="opensamlProfileRequestContext.ensureSubcontext(T(net.shibboleth.profile.context.RelyingPartyContext)).isVerified()"
-            then="SelectMetadataLookupExtensionFlow" else="LookupFromSAMLMetadataService" />
+            then="SelectConfiguration" else="LookupFromSAMLMetadataService" />
     </decision-state>
 
     <action-state id="LookupFromSAMLMetadataService">
@@ -37,7 +37,7 @@
         <evaluate expression="PopulateOIDCMetadataContext" />
         <evaluate expression="InitializeRelyingPartyContextFromSAMLPeer" />
         <evaluate expression="'proceed'" />
-        <transition on="proceed" to="SelectMetadataLookupExtensionFlow" />
+        <transition on="proceed" to="SelectConfiguration" />
     </action-state>
 
     <action-state id="SelectMetadataLookupExtensionFlow">
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
index 8eb034b1..cb9d4600 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/AuthorizeFlowTest.java
@@ -2319,7 +2319,6 @@ public class AuthorizeFlowTest extends AbstractOidcFlowTest {
                 new Pair<>("scope", "openid profile"),
                 new Pair<>("redirect_uri", redirectUri)));
         request.setMethod("GET");
-        storeMetadata(storageService, clientId, clientSecret, scope, redirectUri);
 
         initializeThreadLocals();
         
@@ -2341,7 +2340,6 @@ public class AuthorizeFlowTest extends AbstractOidcFlowTest {
                 new Pair<>("scope", "openid profile"),
                 new Pair<>("redirect_uri", redirectUri)));
         request.setMethod("GET");
-        storeMetadata(storageService, clientId, clientSecret, scope, redirectUri);
 
         initializeThreadLocals();
         

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list