[java-identity-provider] branch main updated: IDP-2449 - maxTimeSinceAuthn profile setting breaks when set to zero

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
https://codeberg.org/Shibboleth/java-identity-provider/commit/825cf1b3d1f6dab8bedfc6ff59244e8f082f0fdb

The following commit(s) were added to refs/heads/main by this push:
     new 825cf1b3d IDP-2449 - maxTimeSinceAuthn profile setting breaks when set to zero
825cf1b3d is described below

commit 825cf1b3d1f6dab8bedfc6ff59244e8f082f0fdb
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Mon Apr 6 10:42:55 2026 -0400

    IDP-2449 - maxTimeSinceAuthn profile setting breaks when set to zero
    
    https://shibboleth.atlassian.net/browse/IDP-2449
---
 .../saml2/profile/config/impl/BrowserSSOProfileConfiguration.java     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/config/impl/BrowserSSOProfileConfiguration.java b/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/config/impl/BrowserSSOProfileConfiguration.java
index 65ec12775..17baac40f 100644
--- a/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/config/impl/BrowserSSOProfileConfiguration.java
+++ b/idp-saml-impl/src/main/java/net/shibboleth/idp/saml/saml2/profile/config/impl/BrowserSSOProfileConfiguration.java
@@ -733,8 +733,8 @@ public class BrowserSSOProfileConfiguration extends AbstractSAML2AssertionProduc
             @Nullable final ProfileRequestContext profileRequestContext) {
         final Duration amount = maximumTimeSinceAuthnLookupStrategy.apply(profileRequestContext);
         Constraint.isFalse(amount != null && amount.isNegative(),
-                "Maximum time since authentication must be greater than or equal to 0");
-        return amount;
+                "Maximum time since authentication must be null or non-negative");
+        return amount != null && !amount.isZero() ? amount : null;
     }
 
     /**

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.