[cpp-sp] branch main updated: Add deprecation of at-risk require rule.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository cpp-sp.

View the commit online:
https://codeberg.org/Shibboleth/cpp-sp/commit/ef35ee31c9f7df015842603340ea11d6edba1f81

The following commit(s) were added to refs/heads/main by this push:
     new ef35ee31 Add deprecation of at-risk require rule.
ef35ee31 is described below

commit ef35ee31c9f7df015842603340ea11d6edba1f81
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Thu Aug 13 08:31:25 2026 -0400

    Add deprecation of at-risk require rule.
---
 apache/mod_shib4.cpp | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apache/mod_shib4.cpp b/apache/mod_shib4.cpp
index c23c8fc8..2373f282 100644
--- a/apache/mod_shib4.cpp
+++ b/apache/mod_shib4.cpp
@@ -1135,7 +1135,7 @@ extern "C" authz_status shib_user_check_authz(request_rec* r, const char* requir
      
     ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(01663)
         "access to %s failed, reason: user '%s' does not meet "
-        "'require'ments for user to be allowed access",
+        "requirements for user to be allowed access",
         r->uri, r->user);
      
     return AUTHZ_DENIED;
@@ -1147,6 +1147,8 @@ extern "C" authz_status shib_acclass_check_authz(request_rec* r, const char* req
     if (!sta.first)
         return sta.second;
 
+    sta.first->warn("DEPRECATED: authnContextClassRef require rule will be removed in a future version");
+
     const htAccessControl& hta = dynamic_cast<const ApacheRequestMapper*>(sta.first->getRequestSettings().first)->getHTAccessControl();
 
     try {

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.