[java-plugin-shibd] branch main updated: Bypass protocol filtering if property is empty.

Codeberg noreply at shibboleth.net
Tue Aug 18 19:22:58 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd/commit/b6577779dcfe3df08b26c3f9c524a20d4bdc7674

The following commit(s) were added to refs/heads/main by this push:
     new b657777  Bypass protocol filtering if property is empty.
b657777 is described below

commit b6577779dcfe3df08b26c3f9c524a20d4bdc7674
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Tue Aug 18 15:22:46 2026 -0400

    Bypass protocol filtering if property is empty.
---
 .../sp/credential/AbstractOrderedCredentialResolver.java     | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/sp-server-api/src/main/java/net/shibboleth/sp/credential/AbstractOrderedCredentialResolver.java b/sp-server-api/src/main/java/net/shibboleth/sp/credential/AbstractOrderedCredentialResolver.java
index 5a1840a..91f1034 100644
--- a/sp-server-api/src/main/java/net/shibboleth/sp/credential/AbstractOrderedCredentialResolver.java
+++ b/sp-server-api/src/main/java/net/shibboleth/sp/credential/AbstractOrderedCredentialResolver.java
@@ -130,11 +130,13 @@ public abstract class AbstractOrderedCredentialResolver extends AbstractIdentifi
         checkComponentActive();
         
         // Check for protocol support.
-        final ProtocolCriterion protocolCriterion = criteria != null ? criteria.get(ProtocolCriterion.class) : null;
-        if (protocolCriterion != null && !supportedProtocols.contains(protocolCriterion.getProtocol())) {
-            log.debug("CredentialResolver {}: Unsupported protocol ({}), filtering out all credentials", getId(),
-                    protocolCriterion.getProtocol());
-            return CollectionSupport.emptyList();
+        if (!supportedProtocols.isEmpty()) {
+            final ProtocolCriterion protocolCriterion = criteria != null ? criteria.get(ProtocolCriterion.class) : null;
+            if (protocolCriterion != null && !supportedProtocols.contains(protocolCriterion.getProtocol())) {
+                log.debug("CredentialResolver {}: Unsupported protocol ({}), filtering out all credentials", getId(),
+                        protocolCriterion.getProtocol());
+                return CollectionSupport.emptyList();
+            }
         }
         
         return filter(doResolve(criteria), criteria);

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list