[java-idp-oidc] branch main updated: JCOMOIDC-167 - Update Nimbus oauth2-oidc-sdk into the latest v11
Codeberg
noreply at shibboleth.net
Fri Jun 5 12:37:38 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch main
in repository java-idp-oidc.
View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/13c002b8390c337292b6b6a7c5087ef15b131990
The following commit(s) were added to refs/heads/main by this push:
new 13c002b8 JCOMOIDC-167 - Update Nimbus oauth2-oidc-sdk into the latest v11
13c002b8 is described below
commit 13c002b8390c337292b6b6a7c5087ef15b131990
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Jun 5 15:37:10 2026 +0300
JCOMOIDC-167 - Update Nimbus oauth2-oidc-sdk into the latest v11
https://shibboleth.atlassian.net/browse/JCOMOIDC-167
Updated tests to use 'exp' value which is later than 'iat'
- Nimbus v11 IDTokenClaimsSet constructor checks that exp is later
---
.../context/OIDCAuthenticationResponseContextTest.java | 4 +++-
.../DefaultResponseClaimsSetLookupFunctionTest.java | 5 ++++-
.../op/profile/impl/AddAccessTokenHashToIDTokenTest.java | 2 +-
.../plugin/oidc/op/profile/impl/AddAcrToIDTokenTest.java | 4 ++--
.../op/profile/impl/AddAttributesToClaimsSetTest.java | 6 +++---
.../oidc/op/profile/impl/AddAuthTimeToIDTokenTest.java | 4 ++--
.../impl/AddAuthorizationCodeHashToIDTokenTest.java | 2 +-
.../oidc/op/profile/impl/AddNonceToIDTokenTest.java | 2 +-
.../impl/AddTokenDeliveryAttributesToClaimsSetTest.java | 8 ++++----
.../FormOutboundAuthenticationResponseMessageTest.java | 2 +-
.../impl/FormOutboundTokenResponseMessageTest.java | 2 +-
.../op/profile/impl/ManipulateClaimsForIDTokenTest.java | 15 ++++++++-------
12 files changed, 31 insertions(+), 25 deletions(-)
diff --git a/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/messaging/context/OIDCAuthenticationResponseContextTest.java b/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/messaging/context/OIDCAuthenticationResponseContextTest.java
index 4c352e50..4b6b31a3 100644
--- a/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/messaging/context/OIDCAuthenticationResponseContextTest.java
+++ b/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/messaging/context/OIDCAuthenticationResponseContextTest.java
@@ -74,7 +74,9 @@ public class OIDCAuthenticationResponseContextTest {
final Subject sub = new Subject("sub");
final List<Audience> aud = new ArrayList<Audience>();
aud.add(new Audience("aud"));
- final IDTokenClaimsSet token = new IDTokenClaimsSet(issuer, sub, aud, new Date(), new Date());
+ final Instant now = Instant.now();
+ final Instant exp = now.plusSeconds(5);
+ final IDTokenClaimsSet token = new IDTokenClaimsSet(issuer, sub, aud, Date.from(exp), Date.from(now));
ctx.setIDToken(token);
ctx.setSubject("sub");
final URI uri = new URI("https://example.org");
diff --git a/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/context/navigate/DefaultResponseClaimsSetLookupFunctionTest.java b/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/context/navigate/DefaultResponseClaimsSetLookupFunctionTest.java
index 8f1d7a91..70f3683a 100644
--- a/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/context/navigate/DefaultResponseClaimsSetLookupFunctionTest.java
+++ b/idp-oidc-extension-api/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/context/navigate/DefaultResponseClaimsSetLookupFunctionTest.java
@@ -14,6 +14,7 @@
package net.shibboleth.idp.plugin.oidc.op.profile.context.navigate;
+import java.time.Instant;
import java.util.ArrayList;
import java.util.Date;
import java.util.List;
@@ -57,7 +58,9 @@ public class DefaultResponseClaimsSetLookupFunctionTest {
Subject sub = new Subject("sub");
List<Audience> aud = new ArrayList<Audience>();
aud.add(new Audience("aud"));
- oidcCtx.setIDToken(new IDTokenClaimsSet(issuer, sub, aud, new Date(), new Date()));
+ final Instant now = Instant.now();
+ final Instant exp = now.plusSeconds(5);
+ oidcCtx.setIDToken(new IDTokenClaimsSet(issuer, sub, aud, Date.from(exp), Date.from(now)));
}
@Test
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAccessTokenHashToIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAccessTokenHashToIDTokenTest.java
index e83188dd..1758cc65 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAccessTokenHashToIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAccessTokenHashToIDTokenTest.java
@@ -47,7 +47,7 @@ public class AddAccessTokenHashToIDTokenTest extends BaseOIDCResponseActionTest
params.setSigningCredential(credential);
params.setSignatureAlgorithm(algo);
profileRequestCtx.ensureOutboundMessageContext().addSubcontext(spCtx);
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
respCtx.setAccessToken("accesstoken", Duration.ofSeconds(100));
action = new AddAccessTokenHashToIDToken();
action.initialize();
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAcrToIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAcrToIDTokenTest.java
index bca1d900..dd786a55 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAcrToIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAcrToIDTokenTest.java
@@ -60,7 +60,7 @@ public class AddAcrToIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccess() throws ComponentInitializationException, ParseException {
init();
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
final IDTokenClaimsSet idToken = respCtx.getIDToken();
@@ -78,7 +78,7 @@ public class AddAcrToIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccess2() throws ComponentInitializationException, ParseException {
init();
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
respCtx.setAcr("acrValue");
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSetTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSetTest.java
index a21a9fb1..7b29347b 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSetTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAttributesToClaimsSetTest.java
@@ -200,7 +200,7 @@ public class AddAttributesToClaimsSetTest extends BaseOIDCResponseActionTest {
*/
@Test
public void testSuccessNoConsent() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
setAttributeContext();
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
@@ -221,7 +221,7 @@ public class AddAttributesToClaimsSetTest extends BaseOIDCResponseActionTest {
*/
@Test
public void testSuccessNoConsentWithTest2Request() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Multimap<String,IdPAttribute> map = HashMultimap.create();
map.put("test2", new IdPAttribute("test2"));
final AttributesMapContainer container = new AttributesMapContainer(map);
@@ -246,7 +246,7 @@ public class AddAttributesToClaimsSetTest extends BaseOIDCResponseActionTest {
*/
@Test
public void testSuccessConsent() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
setAttributeContext();
final OIDCAuthenticationResponseConsentContext ctx = (OIDCAuthenticationResponseConsentContext) respCtx
.addSubcontext(new OIDCAuthenticationResponseConsentContext());
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthTimeToIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthTimeToIDTokenTest.java
index 48f21005..f382f86b 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthTimeToIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthTimeToIDTokenTest.java
@@ -59,7 +59,7 @@ public class AddAuthTimeToIDTokenTest extends BaseOIDCResponseActionTest {
*/
@Test
public void testSuccess() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
final IDTokenClaimsSet idTokenClaimsSet = respCtx.getIDToken();
@@ -75,7 +75,7 @@ public class AddAuthTimeToIDTokenTest extends BaseOIDCResponseActionTest {
*/
@Test
public void testSuccess2() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Instant now = Instant.now().truncatedTo(ChronoUnit.SECONDS);
respCtx.setAuthTime(now);
final Event event = action.execute(requestCtx);
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthorizationCodeHashToIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthorizationCodeHashToIDTokenTest.java
index f1dc4be8..62936870 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthorizationCodeHashToIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddAuthorizationCodeHashToIDTokenTest.java
@@ -49,7 +49,7 @@ public class AddAuthorizationCodeHashToIDTokenTest extends BaseOIDCResponseActio
params.setSigningCredential(credential);
params.setSignatureAlgorithm(algo);
profileRequestCtx.ensureOutboundMessageContext().addSubcontext(spCtx);
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
respCtx.setAuthorizationCode("authcode");
final DefaultComputeAuthorizationCodeHashFunction hashFunction =
new DefaultComputeAuthorizationCodeHashFunction();
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddNonceToIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddNonceToIDTokenTest.java
index 38d0aec2..4baba00b 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddNonceToIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddNonceToIDTokenTest.java
@@ -63,7 +63,7 @@ public class AddNonceToIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccess() throws ComponentInitializationException, ParseException {
init();
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
final IDTokenClaimsSet idTokenClaimsSet = respCtx.getIDToken();
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddTokenDeliveryAttributesToClaimsSetTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddTokenDeliveryAttributesToClaimsSetTest.java
index 37fe907a..5f80c747 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddTokenDeliveryAttributesToClaimsSetTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/AddTokenDeliveryAttributesToClaimsSetTest.java
@@ -68,7 +68,7 @@ public class AddTokenDeliveryAttributesToClaimsSetTest extends BaseOIDCResponseA
*/
@Test
public void testNoTokenDeliveryAttributes() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
assert tokenClaimsCtx != null;
respCtx.removeSubcontext(tokenClaimsCtx);
final Event event = action.execute(requestCtx);
@@ -84,7 +84,7 @@ public class AddTokenDeliveryAttributesToClaimsSetTest extends BaseOIDCResponseA
@Test
public void testNoTokenDeliveryAttributes2() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
respCtx.addSubcontext(new OIDCAuthenticationResponseTokenClaimsContext(), true);
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
@@ -99,7 +99,7 @@ public class AddTokenDeliveryAttributesToClaimsSetTest extends BaseOIDCResponseA
@Test
public void testIdTokenDeliveryAttributes() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
final IDTokenClaimsSet idTokenClaimsSet = respCtx.getIDToken();
@@ -118,7 +118,7 @@ public class AddTokenDeliveryAttributesToClaimsSetTest extends BaseOIDCResponseA
@Test
public void testUserInfoDeliveryAttributes() throws ComponentInitializationException, ParseException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
action = new AddTokenDeliveryAttributesToClaimsSet();
action.setTargetIDToken(false);
action.initialize();
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundAuthenticationResponseMessageTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundAuthenticationResponseMessageTest.java
index 3b7dbc50..78976ffd 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundAuthenticationResponseMessageTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundAuthenticationResponseMessageTest.java
@@ -66,7 +66,7 @@ public class FormOutboundAuthenticationResponseMessageTest extends BaseOIDCRespo
@Test
public void testSuccessMessage()
throws ComponentInitializationException, URISyntaxException, ParseException, JOSEException {
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
signIdTokenInResponseContext();
final Event event = action.execute(requestCtx);
ActionTestingSupport.assertProceedEvent(event);
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundTokenResponseMessageTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundTokenResponseMessageTest.java
index a6a119c5..4bb240e0 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundTokenResponseMessageTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/FormOutboundTokenResponseMessageTest.java
@@ -51,7 +51,7 @@ public class FormOutboundTokenResponseMessageTest extends BaseOIDCResponseAction
public void init() throws ComponentInitializationException, URISyntaxException, ParseException, JOSEException {
action = new FormOutboundTokenResponseMessage();
respCtx.setAccessToken("access_token", Duration.ofSeconds(50));
- setIdTokenToResponseContext("iss", "sub", "aud", Instant.now(), Instant.now());
+ setIdTokenToResponseContext("iss", "sub", "aud", Instant.now().plusSeconds(5), Instant.now());
signIdTokenInResponseContext();
action.initialize();
}
diff --git a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ManipulateClaimsForIDTokenTest.java b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ManipulateClaimsForIDTokenTest.java
index 660581f0..0481fa45 100644
--- a/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ManipulateClaimsForIDTokenTest.java
+++ b/idp-oidc-extension-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/impl/ManipulateClaimsForIDTokenTest.java
@@ -67,7 +67,7 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccessSameMapDoesntChangeContents() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
assert respCtx != null;
final IDTokenClaimsSet initialIdToken = respCtx.getIDToken();
assert initialIdToken != null;
@@ -82,13 +82,14 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
Assert.assertEquals(idToken.getIssuer().getValue(), "iss");
Assert.assertEquals(idToken.getAudience(), Audience.create("aud"));
Assert.assertEquals(idToken.getIssueTime().toInstant().getEpochSecond(), now.getEpochSecond());
- Assert.assertEquals(idToken.getExpirationTime().toInstant().getEpochSecond(), now.getEpochSecond());
+ Assert.assertEquals(idToken.getExpirationTime().toInstant().getEpochSecond(),
+ now.plusSeconds(5).getEpochSecond());
}
@Test
public void testSuccessManipulationForIss() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
assert respCtx != null;
final IDTokenClaimsSet initialIdToken = respCtx.getIDToken();
assert initialIdToken != null;
@@ -111,7 +112,7 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccessManipulationAddStandardClaims() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
assert respCtx != null;
final IDTokenClaimsSet initialIdToken = respCtx.getIDToken();
assert initialIdToken != null;
@@ -137,7 +138,7 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testSuccessManipulationAddCustomClaims() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
assert respCtx != null;
final IDTokenClaimsSet initialIdToken = respCtx.getIDToken();
assert initialIdToken != null;
@@ -163,7 +164,7 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testFailedManipulationDueMissingIss() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
final Map<String, Object> manipulatedClaims = Map.of("sub", "sub", "aud",
List.of("aud"), "exp", now.getEpochSecond(), "iat", now.getEpochSecond());
init(mockFunction(manipulatedClaims));
@@ -174,7 +175,7 @@ public class ManipulateClaimsForIDTokenTest extends BaseOIDCResponseActionTest {
@Test
public void testFailedManipulationDueInvalidIatFormat() throws ComponentInitializationException, ParseException {
final Instant now = Instant.now();
- setIdTokenToResponseContext("iss", "sub", "aud", now, now);
+ setIdTokenToResponseContext("iss", "sub", "aud", now.plusSeconds(5), now);
final Map<String, Object> manipulatedClaims = Map.of("iss", "iss", "sub", "sub", "aud",
List.of("aud"), "exp", now.getEpochSecond(), "iat", "invalidFormat");
init(mockFunction(manipulatedClaims));
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list