[java-oidfed-common] 02/02: Current properties, WIP.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-oidfed-common.

View the commit online:
https://codeberg.org/Shibboleth/java-oidfed-common/commit/65c0b553d872be02085a8a0b3000d1cbc2bcc90d

commit 65c0b553d872be02085a8a0b3000d1cbc2bcc90d
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Aug 27 15:36:15 2026 +0300

    Current properties, WIP.
    
    - Mostly undocumented, subject to change
    - Not yet wired to the module
---
 .../oidfed/conf/oidfed/oidfed.properties           | 118 +++++++++++++++++++++
 1 file changed, 118 insertions(+)

diff --git a/oidfed-common-impl/src/main/resources/net/shibboleth/oidfed/conf/oidfed/oidfed.properties b/oidfed-common-impl/src/main/resources/net/shibboleth/oidfed/conf/oidfed/oidfed.properties
new file mode 100644
index 0000000..e873fcd
--- /dev/null
+++ b/oidfed-common-impl/src/main/resources/net/shibboleth/oidfed/conf/oidfed/oidfed.properties
@@ -0,0 +1,118 @@
+# Set the OpenID Federation Entity ID value (defaults to idp.entityID)
+#idp.oidfed.entityID = https://your.entity.example.org
+
+idp.oidfed.entity-configuration.authorityHints = https://your.authority.example.org
+#idp.oidfed.entity-configuration.trustAnchorHintsLookupStrategy = DefaultTrustAnchorHintsLookupStrategy
+#idp.oidfed.entity-configuration.trustMarksLookupStrategy = DefaultTrustMarksLookupStrategy
+#idp.oidfed.entity-configuration.minRefreshDelay = PT1S
+#idp.oidfed.entity-configuration.maxRefreshDelay = PT30S
+#idp.oidfed.entity-configuration.EntityConfigurationMetadataSkeletonLookupStrategy = DefaultEntityConfigurationMetadataSkeletonLookupStrategy
+#idp.oidfed.entity-configuration.MetadataDecoratorManager = shibboleth.oidfed.DefaultMetadataDecoratorManager
+#idp.oidfed.entity-configuration.sigalg = RS256
+#idp.oidfed.entity-configuration.MetadataSkaletonFile = %{idp.home}/conf/oidfed/oidfed-entity-configuration-metadata.json
+#idp.oidfed.entity-configuration.MetadataSkaletonCacheLifetime = PT10M
+#idp.service.logging.oidfedconfig = OIDFED.Configuration
+
+#idp.oidfed.logging.objectMapper = shibboleth.oidfed.JSONObjectMapper
+
+#idp.oidfed.signing.config = shibboleth.oidfed.SigningConfiguration
+#idp.oidfed.validation.config = shibboleth.oidfed.SignatureValidationConfiguration
+
+# resolve-trust-chain-beans (flow)
+#idp.oidfed.TrustChainMetadataCache = shibboleth.oidfed.TrustChainMetadataCache
+#idp.oidfed.TrustChainMetadataPolicyMergingStrategy = DefaultTrustChainMetadataPolicyMergingStrategy
+#idp.oidfed.MetadataPolicyEnforcer = DefaultMetadataPolicyEnforcer
+#idp.oidfed.policy.arraysAsSpaceSeparatedList = scope
+#idp.oidfed.MetadataValidationCondition = DefaultMetadataValidationCondition
+#idp.oidfed.FederationPolicyConstraints = shibboleth.oidfed.DefaultFederationPolicyConstraints
+#idp.oidfed.MetadataPolicyOperators = shibboleth.oidfed.StandardMetadataPolicyOperators
+#idp.oidfed.MetadataPolicyMergingStrategy = MetadataPolicMergingyStrategy
+#idp.oidfed.LocalMetadataPolicyStrategy = DefaultLocalMetadataPolicyStrategy
+#idp.oidfed.MetadataPolicyOperators = shibboleth.oidfed.StandardMetadataPolicyOperators
+
+#idp.oidfed.cache.entityConfiguration.cleanupTaskInterval = PT5M
+#idp.oidfed.cache.entityConfiguration.minRefreshDelay = PT1M
+#idp.oidfed.cache.entityConfiguration.maxRefreshDelay = PT30M
+#idp.oidfed.cache.entityConfiguration.validContainerLifetime = PT5M
+#idp.oidfed.cache.entityConfiguration.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.entityConfiguration.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.entityConfiguration.customFilterStrategies = 
+#idp.oidfed.cache.entityConfiguration.maxJwtLifetime = PT24H
+#idp.oidfed.cache.entityConfiguration.claimsValidator = shibboleth.oidfed.DefaultEntityConfigurationClaimsValidator
+
+#idp.oidfed.cache.subordinateStatement.cleanupTaskInterval = PT5M
+#idp.oidfed.cache.subordinateStatement.minRefreshDelay = PT1M
+#idp.oidfed.cache.subordinateStatement.maxRefreshDelay = PT30M
+#idp.oidfed.cache.subordinateStatement.customFilterStrategies = 
+#idp.oidfed.cache.subordinateStatement.claimsValidator = shibboleth.oidfed.DefaultSubordinateStatementClaimsValidator
+#idp.oidfed.cache.subordinateStatement.validContainerLifetime = PT5M
+#idp.oidfed.cache.subordinateStatement.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.subordinateStatement.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.subordinateStatement.maxJwtLifetime = PT24H
+#idp.oidfed.cache.subordinateStatement.critClaims = %{idp.oidfed.cache.default.critClaims:}
+
+#idp.oidfed.cache.trustChain.cleanupTaskInterval = PT5M
+#idp.oidfed.cache.trustChain.customFilterStrategies = 
+#idp.oidfed.cache.trustChain.validContainerLifetime = PT5M
+#idp.oidfed.cache.trustChain.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.trustChain.minRefreshDelay = PT1M
+#idp.oidfed.cache.trustChain.maxRefreshDelay = PT30M
+
+# Default list of recognized critical claims, defaults to empty.
+# Also see critClaims with prefixes idp.oidfed.cache.entityConfiguration and idp.oidfed.cache.subordinateStatement.critClaims
+#idp.oidfed.cache.default.critClaims = 
+
+#idp.oidfed.cache.clientauthentication.jwt.defaultalg = RS256
+#idp.oidfed.MetadataPolicyOperators = shibboleth.oidfed.StandardMetadataPolicyOperators
+#idp.oidfed.resolve-entity.MetadataPolicyOperators = shibboleth.oidfed.StandardMetadataPolicyOperators
+#idp.oidfed.register.MetadataPolicyOperators = shibboleth.oidfed.StandardMetadataPolicyOperators
+
+#idp.oidfed.cache.resolveEntity.cleanupTaskInterval = PT5M
+#idp.oidfed.cache.resolveEntity.minRefreshDelay = PT1M
+#idp.oidfed.cache.resolveEntity.maxRefreshDelay = PT30M
+#idp.oidfed.cache.resolveEntity.customFilterStrategies = 
+#idp.oidfed.cache.resolveEntity.claimsValidator = shibboleth.oidfed.DefaultResolveEntityResponseClaimsValidator
+#idp.oidfed.cache.resolveEntity.validContainerLifetime = PT5M
+#idp.oidfed.cache.resolveEntity.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.resolveEntity.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.resolveEntity.maxJwtLifetime = PT24H
+
+#idp.oidfed.LocalTrustAnchorsFile = %{idp.home}/conf/oidfed/oidfed-trust-anchors.json
+
+#idp.oidfed.cache.trustMarkStatus.maxRefreshDelay = PT60S
+#idp.oidfed.cache.trustMarkStatus.maxRefreshDelay = PT30M
+#idp.oidfed.cache.trustMarkStatus.customFilterStrategies = 
+#idp.oidfed.cache.trustMarkStatus.claimsValidator = shibboleth.oidfed.DefaultTrustMarkStatusClaimsValidator
+#idp.oidfed.cache.trustMarkStatus.validContainerLifetime = PT5M
+#idp.oidfed.cache.trustMarkStatus.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.trustMarkStatus.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.trustMarkStatus.maxJwtLifetime = PT24H
+
+#idp.oidfed.cache.trustMark.minRefreshDelay = PT1H
+#idp.oidfed.cache.trustMark.maxRefreshDelay = PT24H
+#idp.oidfed.cache.trustMark.customFilterStrategies = 
+#idp.oidfed.cache.trustMark.claimsValidator = shibboleth.oidfed.DefaultTrustMarkClaimsValidator
+#idp.oidfed.cache.trustMark.validContainerLifetime = PT5M
+#idp.oidfed.cache.trustMark.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.trustMark.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.trustMark.maxJwtLifetime = P365D
+
+#idp.oidfed.cache.signedKeyset.cleanupTaskInterval = PT5M
+#idp.oidfed.cache.signedKeyset.minRefreshDelay = PT1M
+#idp.oidfed.cache.signedKeyset.maxRefreshDelay = PT30M
+#idp.oidfed.cache.signedKeyset.validContainerLifetime = PT5M
+#idp.oidfed.cache.signedKeyset.invalidContainerLifetime = PT1M
+#idp.oidfed.cache.signedKeyset.exceptionContainerLifetime = PT0S
+#idp.oidfed.cache.signedKeyset.customFilterStrategies = 
+#idp.oidfed.cache.signedKeyset.claimsValidator = shibboleth.oidfed.DefaultSignedKeysetClaimsValidator
+
+#idp.oidfed.admin.resolvertest.logging = TestTrustChainResolver
+#idp.oidfed.admin.resolvertest.accessPolicy = AccessByIPAddress
+#idp.oidfed.admin.resolvertest.nonBrowserSupported = true
+#idp.oidfed.admin.resolvertest.authenticated = false
+#idp.oidfed.admin.resolvertest.resolveAttributes = false
+#idp.oidfed.admin.resolvertest.postAuthenticationFlows
+#idp.oidfed.admin.resolvertest.defaultAuthenticationMethods
+#idp.oidfed.admin.resolvertest.TrustChainMetadataCache = shibboleth.oidfed.TrustChainMetadataCache
+#idp.oidfed.admin.resolvertest.TrustMarkStatusMetadataCache = shibboleth.oidfed.TrustMarkStatusMetadataCache
+

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.