[java-idp-oidc] 01/01: JOIDC-273 - Activation of shibboleth.LDAPValidator for shibboleth.authn.OAuth2Client.Validators fails

Codeberg noreply at shibboleth.net
Thu Jul 9 07:55:33 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch maint-4.3
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/78088f17d0b62a154ea49adf91f92b5688746917

commit 78088f17d0b62a154ea49adf91f92b5688746917
Author: Henri Mikkonen <henri.mikkonen at csc.fi>
AuthorDate: Fri May 22 10:34:42 2026 +0300

    JOIDC-273 - Activation of shibboleth.LDAPValidator for shibboleth.authn.OAuth2Client.Validators fails
    
    https://shibboleth.atlassian.net/browse/JOIDC-273
    
    - Wired the following new properties
      - idp.authn.OAuth2Client.LDAP.startTLSTimeout  for startTLSTimeout, defaults to 3s
      - idp.authn.OAuth2Client.LDAP.autoReconnect for autoReconnect, defaults to true
      - idp.authn.OAuth2Client.LDAP.reconnectTimeout for reconnectTimeut, defaults to 10s
    - Also included the 'shibboleth.LDAPValidator' for the list of active validators for flow tests
      - Before the fixes above, it failed to initialize and prevented flow tests from working
---
 .../net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-beans.xml | 3 +++
 .../net/shibboleth/idp/module/conf/authn/oauth2client-authn-config.xml | 1 +
 2 files changed, 4 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-beans.xml
index cd0b41ec..797fcb55 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/OAuth2Client/OAuth2Client-beans.xml
@@ -187,8 +187,11 @@
         p:connectionStrategyType="#{'%{idp.authn.OAuth2Client.LDAP.connectionStrategy:ACTIVE_PASSIVE}'.trim()}"
         p:ldapUrl="%{idp.authn.OAuth2Client.LDAP.ldapURL:ldap://localhost:10389}"
         p:useStartTLS="%{idp.authn.OAuth2Client.LDAP.useStartTLS:true}"
+        p:startTLSTimeout="%{idp.authn.OAuth2Client.LDAP.startTLSTimeout:PT3S}"
         p:connectTimeout="%{idp.authn.OAuth2Client.LDAP.connectTimeout:PT3S}"
         p:responseTimeout="%{idp.authn.OAuth2Client.LDAP.responseTimeout:PT3S}"
+        p:autoReconnect="%{idp.authn.OAuth2Client.LDAP.autoReconnect:true}"
+        p:reconnectTimeout="%{idp.authn.OAuth2Client.LDAP.reconnectTimeout:PT10S}"
         p:trustCertificatesCredentialConfig-ref="shibboleth.authn.OAuth2Client.LDAP.trustCertificates"
         p:truststoreCredentialConfig-ref="shibboleth.authn.OAuth2Client.LDAP.truststore"
         p:disablePooling="%{idp.authn.OAuth2Client.LDAP.disablePooling:false}"
diff --git a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/authn/oauth2client-authn-config.xml b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/authn/oauth2client-authn-config.xml
index 032594b7..9241ee56 100644
--- a/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/authn/oauth2client-authn-config.xml
+++ b/idp-oidc-extension-impl/src/test/resources/net/shibboleth/idp/module/conf/authn/oauth2client-authn-config.xml
@@ -25,6 +25,7 @@
                 </bean>
             </property>
         </bean>
+        <ref bean="shibboleth.LDAPValidator" />
     </util:list>
     
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list