[java-identity-provider] branch main updated: IDP-2470 - Suppress auto-wiring of CredentialResolvers in IdP root

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-identity-provider.

View the commit online:
https://codeberg.org/Shibboleth/java-identity-provider/commit/c971d757ee43f6da39157e13ef03caa9d62e92be

The following commit(s) were added to refs/heads/main by this push:
     new c971d757e IDP-2470 - Suppress auto-wiring of CredentialResolvers in IdP root
c971d757e is described below

commit c971d757ee43f6da39157e13ef03caa9d62e92be
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Tue Jul 28 12:44:58 2026 -0400

    IDP-2470 - Suppress auto-wiring of CredentialResolvers in IdP root
    
    https://shibboleth.atlassian.net/browse/IDP-2470
---
 .../src/main/resources/net/shibboleth/idp/conf/security-system.xml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/security-system.xml b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/security-system.xml
index 06621d1ad..e17b41b99 100644
--- a/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/security-system.xml
+++ b/idp-conf-impl/src/main/resources/net/shibboleth/idp/conf/security-system.xml
@@ -95,15 +95,18 @@
     <!--
     The beans below are primarily used by trust engines in relying-party-system.xml, but also in the
     resolver for encryption parameters above.
+    
+    We suppress auto-wiring in the interest of eventually wanting to auto-wire "local" CredentialResolvers
+    in the future. These are special cases that would not be of interest for that. 
     -->
 
-    <bean id="shibboleth.MetadataCredentialResolver"
+    <bean id="shibboleth.MetadataCredentialResolver" autowire-candidate=”false”
         class="org.opensaml.saml.security.impl.MetadataCredentialResolver"
          p:roleDescriptorResolver-ref="shibboleth.RoleDescriptorResolver"
          p:keyInfoCredentialResolver-ref="shibboleth.KeyInfoCredentialResolver">
     </bean>
 
-    <bean id="shibboleth.KeyInfoCredentialResolver"
+    <bean id="shibboleth.KeyInfoCredentialResolver" autowire-candidate=”false”
         class="org.opensaml.xmlsec.config.impl.DefaultSecurityConfigurationBootstrap"
         factory-method="buildBasicInlineKeyInfoCredentialResolver" />
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.