[java-plugin-shibd-saml] branch main updated: Try to recover target resource as early as possible for passive case.

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
http://git.shibboleth.net/view/?p=java-plugin-shibd-saml.git;a=commit;h=cfe7bad3651dc8d688961ef571c3482f7052e543

The following commit(s) were added to refs/heads/main by this push:
     new cfe7bad  Try to recover target resource as early as possible for passive case.
cfe7bad is described below

commit cfe7bad3651dc8d688961ef571c3482f7052e543
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Tue Sep 23 15:19:57 2025 -0400

    Try to recover target resource as early as possible for passive case.
---
 .../shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml   | 12 ++++++++++++
 .../shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml    |  2 ++
 2 files changed, 14 insertions(+)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
index f69f158..1f32aae 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
@@ -12,6 +12,18 @@
 
     <import resource="classpath:/META-INF/net/shibboleth/idp/flows/sp/saml2-common-beans.xml" />
 
+    <bean id="MapStateTokenToResource"
+        class="net.shibboleth.sp.profile.impl.MapStateTokenToResource" scope="prototype"
+        p:stateTokenLookupStrategy-ref="RelayStateLookup" />
+
+    <bean id="RelayStateLookup" parent="shibboleth.Functions.Compose">
+        <constructor-arg name="g">
+            <bean parent="shibboleth.Functions.Expression"
+                c:_0="#input != null ? T(org.opensaml.saml.common.binding.SAMLBindingSupport).getRelayState(#input) : null" />
+        </constructor-arg>
+        <constructor-arg name="f" ref="shibboleth.MessageContextLookup.Inbound"/>
+    </bean>
+
     <bean id="HandleNoPassive" class="net.shibboleth.sp.profile.impl.WebFlowMessageHandlerAdaptor" scope="prototype"
             c:executionDirection="INBOUND">
         <constructor-arg>
diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
index 0f55d54..9700ab9 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-flow.xml
@@ -8,6 +8,8 @@
         <evaluate expression="DecodeMessage" />
 <!--        <evaluate expression="PostDecodePopulateAuditContext" />-->
 
+        <evaluate expression="MapStateTokenToResource" />
+        
         <evaluate expression="CheckMessageVersion" />
         <evaluate expression="HandleNoPassive" />
         <evaluate expression="ProcessCorrelationCookie" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.