[java-plugin-shibd-oidc] branch main updated: Uncomment UserInfo JWT audience check validator

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-oidc/commit/a0065259c21dc369e7b96406603775b5a21c42e3

The following commit(s) were added to refs/heads/main by this push:
     new a006525  Uncomment UserInfo JWT audience check validator
a006525 is described below

commit a0065259c21dc369e7b96406603775b5a21c42e3
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Mar 12 10:19:24 2026 +0000

    Uncomment UserInfo JWT audience check validator
    
     - I missed this validator when re-enabling them. It is only used if the
    UserInfo response is a signed JWT, so not common, but of course is a
    required check.
---
 .../META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
index f91363f..fb8a000 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
@@ -533,7 +533,7 @@
         <ref bean="UserInfoTokenRequiredClaimsValidator" />
         <ref bean="SubMatchesIDTokenClaimValidator" />
         <ref bean="IssuerClaimsValidator" />
-       <!--   TODO <ref bean="AudienceClaimsValidator" /> -->
+        <ref bean="AudienceClaimsValidator" />
     </util:list>
 
     <bean id="UserInfoTokenRequiredClaimsValidator"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.