[java-idp-plugin-oidc-op-oidfed] branch dev/CACHE-REFACTOR updated: Cache item specific max lifetime properties for the 'iat' claim.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/CACHE-REFACTOR
in repository java-idp-plugin-oidc-op-oidfed.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-oidc-op-oidfed/commit/4df7ecd9a86abb7d52a0b9a2d493dae7ae71ea65

The following commit(s) were added to refs/heads/dev/CACHE-REFACTOR by this push:
     new 4df7ecd  Cache item specific max lifetime properties for the 'iat' claim.
4df7ecd is described below

commit 4df7ecd9a86abb7d52a0b9a2d493dae7ae71ea65
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Feb 20 12:05:03 2026 +0200

    Cache item specific max lifetime properties for the 'iat' claim.
---
 .../resources/META-INF/net.shibboleth.idp/postconfig.xml     | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/idp-oidfed-op-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/idp-oidfed-op-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index a64e8d5..4d7606f 100644
--- a/idp-oidfed-op-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/idp-oidfed-op-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -149,7 +149,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.cache.entityConfiguration.maxJwtLifetime:PT24H}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />
@@ -275,7 +275,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.cache.subordinateStatement.maxJwtLifetime:PT24H}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />
@@ -446,7 +446,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.cache.resolveEntity.maxJwtLifetime:PT24H}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />
@@ -575,7 +575,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.cache.trustMarkStatus.maxJwtLifetime:PT24H}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />
@@ -662,7 +662,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.maxTrustMarkifetime:P365D}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />
@@ -1090,7 +1090,7 @@
             <util:list value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.IssuedAtClaimsValidator"
                     p:clockSkew="%{idp.policy.clockSkew:PT1M}"
-                    p:messageLifetime="%{idp.policy.messageLifetime:PT1M}"
+                    p:messageLifetime="%{idp.oidfed.cache.explicitRegistration.maxJwtLifetime:PT1M}"
                     p:requiredRule="true" />
                 <bean class="net.shibboleth.oidc.security.jwt.claims.impl.RequiredClaimsValidator"
                     p:requiredClaims="iss" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.