[java-plugin-shibd-saml] 01/02: Add sp.saml.checkReplay to bypass replay checking of msgs.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-saml/commit/62975a2fc9dd1d601278439865d7f5ce992eb641

commit 62975a2fc9dd1d601278439865d7f5ce992eb641
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Fri Aug 7 12:29:16 2026 -0400

    Add sp.saml.checkReplay to bypass replay checking of msgs.
---
 .../META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml  | 1 +
 1 file changed, 1 insertion(+)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
index 55202c0..c72f0fb 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/saml2/saml2-beans.xml
@@ -81,6 +81,7 @@
                             p:checkDuringInit="false"
                             p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier" />
                         <bean class="org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler" scope="prototype"
+                            p:activationCondition="%{sp.saml.checkReplay:true}"
                             p:replayCache-ref="shibboleth.ReplayCache"
                             p:expires="%{sp.policy.messageLifetime:PT3M}" />
                         <bean class="org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurityHandler" scope="prototype"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.