[java-plugin-shibd-saml] branch main updated: Implement check for NoPassive and handle as first class event.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
http://git.shibboleth.net/view/?p=java-plugin-shibd-saml.git;a=commit;h=ef2ff1c7b6643e8c403b52c5b702c9fb7e8aca33

The following commit(s) were added to refs/heads/main by this push:
     new ef2ff1c  Implement check for NoPassive and handle as first class event.
ef2ff1c is described below

commit ef2ff1c7b6643e8c403b52c5b702c9fb7e8aca33
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Sep 23 13:58:39 2025 -0400

    Implement check for NoPassive and handle as first class event.
---
 .../idp/flows/sp/consumer/saml2/saml2-beans.xml       | 19 +++++++++++++++++--
 .../idp/flows/sp/consumer/saml2/saml2-flow.xml        |  1 +
 2 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
index 7f2f5d5..f69f158 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
@@ -12,6 +12,22 @@
 
     <import resource="classpath:/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml" />
 
+    <bean id="HandleNoPassive" class="net.shibboleth.sp.profile.impl.WebFlowMessageHandlerAdaptor" scope="prototype"
+            c:executionDirection="INBOUND">
+        <constructor-arg>
+            <bean class="org.opensaml.messaging.handler.impl.BasicMessageHandlerChain">
+                <property name="handlers">
+                    <list>
+                        <bean class="org.opensaml.saml.saml2.binding.impl.CheckNoPassiveHandler" scope="prototype" />
+                    </list>
+                </property>
+             </bean>
+        </constructor-arg>
+        <property name="errorEvent">
+            <util:constant static-field="net.shibboleth.idp.authn.AuthnEventIds.NO_PASSIVE" />
+        </property>
+    </bean>
+
     <bean id="InboundEntityIDLookup" parent="shibboleth.Functions.Compose">
         <constructor-arg name="g">
             <bean class="org.opensaml.saml.common.messaging.context.navigate.SAMLEntityIDFunction" />
@@ -34,9 +50,8 @@
                 c:_0="#input != null ? T(org.opensaml.saml.common.binding.SAMLBindingSupport).getRelayState(#input) : null" />
         </constructor-arg>
         <constructor-arg name="f" ref="shibboleth.MessageContextLookup.Inbound"/>
-    </bean>
+    </bean>    
     
-
     <bean id="HandleResponse" class="net.shibboleth.sp.profile.impl.WebFlowMessageHandlerAdaptor" scope="prototype"
             c:executionDirection="INBOUND">
         <constructor-arg>
diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
index 051b125..0f55d54 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
@@ -9,6 +9,7 @@
 <!--        <evaluate expression="PostDecodePopulateAuditContext" />-->
 
         <evaluate expression="CheckMessageVersion" />
+        <evaluate expression="HandleNoPassive" />
         <evaluate expression="ProcessCorrelationCookie" />
         <evaluate expression="SAMLProtocolAndRole" />
         <evaluate expression="SAMLMetadataLookup" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.