[java-plugin-shibd-oidc] branch main updated (248d38b -> 2b20328)

Codeberg noreply at shibboleth.net
Wed Jul 15 08:36:08 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a change to branch main
in repository java-plugin-shibd-oidc.

    from 248d38b  Bump internal plugin version
     add 0009de6  JSHIBDOIDC-22 - Store off iss, sid in opaque session data to support logout
     new ebdbb28  JSHIBDOIDC-22 - Store off iss, sid in opaque session data to support logout
     new 825bf59  JCOMOIDC-176 - Add logout request handlers
     new 97d7b28  Improve logout flow test
     new 803624f  Remove redundant state generation
     new 2b20328  Fix id_token extraction from session data and update test

The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 sp-oidc-api/pom.xml                                |  23 +-
 .../sp/oidc/context/OIDCLogoutContext.java         |  51 +++++
 ...utRequestFromMessageContextLookupFunction.java} |  17 +-
 ...oviderMetadataLogoutEndpointLookupStrategy.java |  70 +++++++
 ...ckage-info.java => LogoutRequestStateData.java} |  18 +-
 .../shibboleth/sp/oidc/profile/OIDCConstants.java  |   8 +-
 .../config/navigate/ClientIDLookupStrategy.java    |  61 ++++++
 .../navigate/PostLogoutRedirectLookupStrategy.java |  93 +++++++++
 .../logic/IDTokenHintActivationCondition.java      |  64 ++++++
 .../logic/LogoutHintActivationCondition.java       |  67 ++++++
 .../PostLogoutRedirectUriActivationCondition.java  |  64 ++++++
 ...tAgentAndRelyingPartyContextLookupFunction.java |  31 ++-
 .../navigate/IDTokenHintLookupStrategy.java        |  73 +++++++
 .../context/navigate/LogoutHintLookupStrategy.java | 109 ++++++++++
 .../logic/AbstractLogoutLookupStrategyTest.java}   |  16 +-
 .../logic/LogoutHintActivationConditionTest.java   |  71 +++++++
 .../PostLogoutRedirectLookupStrategyTest.java      |  89 ++++++++
 .../navigate/IDTokenHintLookupStrategyTest.java    |  89 ++++++++
 .../navigate/LogoutHintLookupStrategyTest.java     | 116 +++++++++++
 .../shibboleth/sp/oidc/testing/TestConstants.java  |  11 +-
 .../net/shibboleth/sp/oidc/testing/TestHelper.java |  60 ++++++
 .../META-INF/net.shibboleth.idp/postconfig.xml     |  34 +++
 .../idp/flows/sp/consumer/oidc/oidc-beans.xml      |  11 -
 .../idp/flows/sp/initiator/oidc/oidc-beans.xml     |  41 +---
 .../idp/flows/sp/initiator/oidc/oidc-flow.xml      |   5 +-
 .../consumer/oidc/oidc-beans.xml}                  |  19 +-
 .../flows/sp/logout/consumer/oidc/oidc-flow.xml    | 101 +++++++++
 .../consumer/oidc/redirect/redirect-beans.xml}     |  14 +-
 .../consumer/oidc/redirect/redirect-flow.xml}      |   4 +-
 .../flows/sp/logout/initiator/oidc/oidc-beans.xml  | 158 ++++++++++++++
 .../flows/sp/logout/initiator/oidc/oidc-flow.xml   |  32 +++
 .../shibboleth/idp/flows/sp/oidc-common-beans.xml  |  29 ++-
 .../net/shibboleth/sp/service/agent/postconfig.xml |  12 +-
 .../shibboleth/idp/module/conf/sp/oidc.properties  |   9 +
 .../resources/templates/oidc-request-form-post.vm  |  65 ++++++
 .../sp/oidc/flows/OIDCLogoutInitiatorFlowTest.java | 232 +++++++++++++++++++++
 .../oidc/flows/OIDCSessionInitiatorFlowTest.java   |  20 +-
 .../sp/oidc/flows/OIDCTokenConsumerFlowTest.java   |  64 +++---
 ...DCTokenConsumerFlowUsingStorageServiceTest.java |   6 +-
 ...DCEnvironmentApplicationContextInitializer.java |   3 +-
 .../src/test/resources/logback-flow-test.xml       |  33 +++
 .../src/test/resources/logback-test.xml            |   2 +-
 .../resources/metadata/openid-configuration.json   |   4 +-
 .../idp/module/conf/sp/oidc-test-agents.xml        |  11 +-
 ...tLogoutRequestParameterValueMessageHandler.java | 204 ++++++++++++++++++
 ...ata.java => AddClientAddressToStateAction.java} | 102 +++------
 ...ticationStateData.java => CreateStateData.java} |  33 +--
 .../oidc/profile/impl/InitializeLogoutRequest.java | 151 ++++++++++++++
 .../impl/InitializeOAuth2ClientContext.java        |  36 +---
 .../impl/InitializeOutboundMessageContext.java     |   4 +-
 .../InitializeRelyingPartyContextFromOIDCPeer.java |   2 +
 .../impl/LogoutRequestStateForStorageStrategy.java |  40 ++++
 .../sp/oidc/profile/impl/PrepareAgentResponse.java | 111 +++++++---
 .../sp/oidc/profile/impl/PreserveOAuthState.java   |  68 ++++++
 .../impl/ProcessLogoutInitiatorRequest.java        | 207 ++++++++++++++++++
 .../profile/impl/BaseOIDCAuthenticationTest.java   |   3 +-
 .../impl/CreateAuthenticationStateDataTest.java    |  20 +-
 .../profile/impl/PrepareAgentResponseTest.java     |   9 +
 .../impl/ProcessLogoutInitiatorRequestTest.java    | 206 ++++++++++++++++++
 .../sp/oidc/profile/impl/SealerKeyStore.jks        | Bin 0 -> 984 bytes
 .../sp/oidc/profile/impl/SealerKeyStore.kver       |   1 +
 61 files changed, 2965 insertions(+), 342 deletions(-)
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/context/OIDCLogoutContext.java
 copy sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/{profile/config/navigate/NonceLookupStrategy.java => messaging/context/navigate/LogoutRequestFromMessageContextLookupFunction.java} (56%)
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/messaging/context/navigate/ProviderMetadataLogoutEndpointLookupStrategy.java
 copy sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/{package-info.java => LogoutRequestStateData.java} (56%)
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/config/navigate/ClientIDLookupStrategy.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/config/navigate/PostLogoutRedirectLookupStrategy.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/context/logic/IDTokenHintActivationCondition.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/context/logic/LogoutHintActivationCondition.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/context/logic/PostLogoutRedirectUriActivationCondition.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/context/navigate/IDTokenHintLookupStrategy.java
 create mode 100644 sp-oidc-api/src/main/java/net/shibboleth/sp/oidc/profile/context/navigate/LogoutHintLookupStrategy.java
 copy sp-oidc-api/src/test/java/net/shibboleth/sp/oidc/profile/{config/navigate/AbstractAuthenticationLookupStrategyTest.java => context/logic/AbstractLogoutLookupStrategyTest.java} (85%)
 create mode 100644 sp-oidc-api/src/test/java/net/shibboleth/sp/oidc/profile/context/logic/LogoutHintActivationConditionTest.java
 create mode 100644 sp-oidc-api/src/test/java/net/shibboleth/sp/oidc/profile/context/logic/PostLogoutRedirectLookupStrategyTest.java
 create mode 100644 sp-oidc-api/src/test/java/net/shibboleth/sp/oidc/profile/context/navigate/IDTokenHintLookupStrategyTest.java
 create mode 100644 sp-oidc-api/src/test/java/net/shibboleth/sp/oidc/profile/context/navigate/LogoutHintLookupStrategyTest.java
 copy sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/{consumer/oidc/code/post/post-beans.xml => logout/consumer/oidc/oidc-beans.xml} (59%)
 create mode 100644 sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/logout/consumer/oidc/oidc-flow.xml
 copy sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/{consumer/oidc/code/post/post-beans.xml => logout/consumer/oidc/redirect/redirect-beans.xml} (68%)
 copy sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/{consumer/oidc/code/post/post-flow.xml => logout/consumer/oidc/redirect/redirect-flow.xml} (81%)
 create mode 100644 sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/logout/initiator/oidc/oidc-beans.xml
 create mode 100644 sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/logout/initiator/oidc/oidc-flow.xml
 create mode 100644 sp-oidc-conf-impl/src/main/resources/templates/oidc-request-form-post.vm
 create mode 100644 sp-oidc-conf-impl/src/test/java/net/shibboleth/sp/oidc/flows/OIDCLogoutInitiatorFlowTest.java
 create mode 100644 sp-oidc-conf-impl/src/test/resources/logback-flow-test.xml
 create mode 100644 sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/AbstractLogoutRequestParameterValueMessageHandler.java
 copy sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/{CreateAuthenticationStateData.java => AddClientAddressToStateAction.java} (54%)
 rename sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/{CreateAuthenticationStateData.java => CreateStateData.java} (80%)
 create mode 100644 sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/InitializeLogoutRequest.java
 create mode 100644 sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/LogoutRequestStateForStorageStrategy.java
 create mode 100644 sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/PreserveOAuthState.java
 create mode 100644 sp-oidc-impl/src/main/java/net/shibboleth/sp/oidc/profile/impl/ProcessLogoutInitiatorRequest.java
 create mode 100644 sp-oidc-impl/src/test/java/net/shibboleth/sp/oidc/profile/impl/ProcessLogoutInitiatorRequestTest.java
 create mode 100644 sp-oidc-impl/src/test/resources/net/shibboleth/sp/oidc/profile/impl/SealerKeyStore.jks
 create mode 100644 sp-oidc-impl/src/test/resources/net/shibboleth/sp/oidc/profile/impl/SealerKeyStore.kver

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list