[java-idp-plugin-oidc-op-oidfed] branch main updated (958ce30 -> aa31c4f)
Codeberg
noreply at shibboleth.net
Thu May 7 10:47:55 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a change to branch main
in repository java-idp-plugin-oidc-op-oidfed.
from 958ce30 Set enforcer-data version into 2.0.1
add f8c29c4 Refactoring for metadata caches related to remote entity statements. WIP.
add f385ffb Renamed the deserializer for LocalKeyContainer.
add 154625d Refactoring for metadata caches related to remote entity resolver and trust marks.
add a661b76 Refactoring the metadata cache packaging on the impl-module
add ef2fed0 Removed final references to Nimbus EntityStatement from the main source
add 25a9758 Include metadata-claim parsing for Jackson
add e8b450c Removed remaining references to Nimbus EntityStatement from the test code
add db22a79 Improved the structure of metadata wrappers in the API module
add 6bb9fca Switched the metadata wrappers in the API-module into interfaces
add 5c056d2 Some minor refactoring, null checkup cleaning, style improvements
add d5ff6c9 Exploit locally trusted anchor credentials for validating immediate subordinate
add 4b6448e Add configurable cache container lifetime strategy for cases where response cannot be fetched
add ea58669 Improved and simplified the default trust chain fetching strategy
add e5ad8c3 Simplify wrapper implementation construction and modification via code
add 76756ae Refactored the federation constraints to allow modification of statements
add 8976a09 Initial support for the metadata_policy_crit claim in subordinate statements
add e51151b Corrected JavaDoc.
add 1a5f82b Initial support for crit claim and custom filter strategies for cache containers
add 0021ff1 Harmonised explicit registration request (statement and trust chain) validation
add 45d2abd Restructured metadata cache packages
add 295c18d Move profile-specific functions from metadata-cache packages into ..profile.navigate
add 5563351 Replaced the simplest identifier lookup strategies with Spring expressions
add 6fc88fc Verify trust_marks syntax (including trust_mark_type match) as claims validator
add 0d154fc Improved parsing and validation of entity statements
add 4df7ecd Cache item specific max lifetime properties for the 'iat' claim.
add 2d5e125 Initial support for pushed/provided trust chains
add 293855a Initial implementation for the signed keyset flow (to be used as OP's signed_jwks_uri)
add 92123fc Include the use of jwks_uri into the automatic registration tests
add 1087aea Initial implementation for consuming signed_jwks_uri
add 8c7d7db Initial support for client authentication in the resolve-entity flow
add 4b54ef6 Initial support for client authentication to federation endpoints
add 567d19b Profile configuration option to control remote trust mark validation
add f3bda34 Initialize keys statically in the abstract flow test class
add f6d3427 Integrated the remote trust mark validation option into resolve entity API.
new aa31c4f Merge branch 'dev/CACHE-REFACTOR'
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
idp-oidfed-op-api/pom.xml | 10 -
.../oidc/op/oidfed/metadata/BaseJWTWrapper.java | 41 +-
.../oidc/op/oidfed/metadata/BasePayload.java | 38 +-
.../op/oidfed/metadata/EntityConfiguration.java | 10 +-
.../oidc/op/oidfed/metadata/EntityStatement.java | 37 +
.../op/oidfed/metadata/ResolveEntityResponse.java | 10 +-
.../oidc/op/oidfed/metadata/SignedKeyset.java | 11 +-
.../op/oidfed/metadata/SubordinateStatement.java | 10 +-
.../plugin/oidc/op/oidfed/metadata/TrustMark.java | 10 +-
.../oidc/op/oidfed/metadata/TrustMarkStatus.java | 10 +-
.../payload/BaseExpirableSubjectPayload.java} | 26 +-
.../metadata/payload/BaseMetadataPayload.java | 16 +-
.../payload/EntityConfigurationPayload.java | 67 ++
.../metadata/payload/EntityStatementPayload.java | 41 +
.../payload/ResolveEntityResponsePayload.java | 41 +
.../metadata/payload/SignedKeysetPayload.java | 19 +-
.../payload/SubordinateStatementPayload.java | 59 ++
.../oidfed/metadata/payload/TrustMarkPayload.java | 51 ++
.../metadata/payload/TrustMarkStatusPayload.java | 33 +-
.../op/oidfed/metadata/payload/claim/Metadata.java | 83 ++
.../metadata/payload/claim/TrustMarkOwner.java | 38 +-
...ration.java => ProvidedTrustChainResolver.java} | 21 +-
...nAutomaticRegistrationProfileConfiguration.java | 29 +
...tityStatementProducingProfileConfiguration.java | 30 +
...ederationResolveEntityProfileConfiguration.java | 6 +-
...ederationSignedKeysetProfileConfiguration.java} | 13 +-
...ionTrustMarkValidatingProfileConfiguration.java | 10 +
... => ClaimsSetDecorationTypeLookupFunction.java} | 21 +-
.../EntityStatementLifetimeLookupFunction.java | 7 +-
...tionalClaimsLookupStrategiesLookupFunction.java | 6 +-
...hainClaimsSetDecorationTypeLookupFunction.java} | 20 +-
...ava => RemoteTrustMarkValidationPredicate.java} | 31 +-
.../context/AutomaticRegistrationContext.java | 51 ++
.../context/RelyingPartyTrustChainContext.java | 72 +-
.../oidfed/profile/context/VerifiedTrustChain.java | 76 ++
.../navigate/TrustAnchorIdLookupFunction.java | 3 +-
.../oidfed/support/ClaimsSetExtensionSupport.java | 51 +-
.../support/ClientInformationExtensionSupport.java | 6 -
idp-oidfed-op-impl/pom.xml | 5 +
.../policyrule/impl/EntityTrustMarkPolicyRule.java | 4 +-
.../ExplicitClientRegistrationRequestDecoder.java | 36 +-
.../decoding/impl/ResolveEntityRequestDecoder.java | 24 +-
.../impl/EntityConfigurationResponse.java | 55 ++
.../impl/ExplicitClientRegistrationRequest.java | 16 +-
.../impl/ExplicitClientRegistrationResponse.java | 1 +
.../messaging/impl/ResolveEntityRequest.java | 25 +-
.../messaging/impl/SignedKeysetResponse.java | 55 ++
.../oidfed/messaging/impl/TrustMarkResponse.java | 87 --
.../messaging/impl/TrustMarkStatusRequest.java | 72 --
.../messaging/impl/TrustMarkStatusResponse.java | 87 --
...ntityStatementSignatureValidationComponent.java | 47 --
...FederationEndpointResponseFetchingStrategy.java | 194 -----
...ityConfigurationEndpointExtractionStrategy.java | 82 --
...tyStatementContentValidationFilterStrategy.java | 83 --
.../DefaultEntityStatementFetchingStrategy.java | 171 ----
...atementSubjectIdentifierExtractionStrategy.java | 40 -
...IssuerEntityIDCriteriaToIdentifierStrategy.java | 42 -
...efaultProvidedTrustChainValidationStrategy.java | 135 ----
...eEntityRequestCriteriaToIdentifierStrategy.java | 42 -
...EntityResponseIdentifierExtractionStrategy.java | 38 -
...yResponseSignatureValidationFilterStrategy.java | 128 ---
...ultResolveEntityTrustChainFetchingStrategy.java | 122 ---
...ubjectEntityIDCriteriaToIdentifierStrategy.java | 42 -
...rdinateStatementEndpointExtractionStrategy.java | 149 ----
...inateStatementIdentifierExtractionStrategy.java | 43 -
...StatementSignatureValidationFilterStrategy.java | 116 ---
.../DefaultTrustChainExpirationTimeStrategy.java | 60 --
.../DefaultTrustChainFetchingStrategy.java | 382 ---------
...ChainTrustedTrustMarkIssuersLookupStrategy.java | 114 ---
...tChainTrustedTrustMarkOwnersLookupStrategy.java | 103 ---
.../metadata/DefaultTrustMarkFetchingStrategy.java | 114 ---
...kResponseSignatureValidationFilterStrategy.java | 128 ---
.../DefaultTrustMarkStatusFetchingStrategy.java | 113 ---
...sResponseSignatureValidationFilterStrategy.java | 128 ---
.../op/oidfed/metadata/EntityStatementHelper.java | 200 -----
.../oidfed/metadata/TrustMarkRequestCriterion.java | 79 --
.../metadata/TrustMarkResponseContainer.java | 75 --
.../metadata/TrustMarkStatusRequestCriterion.java | 80 --
.../metadata/TrustMarkStatusResponseContainer.java | 69 --
...FederationEndpointResponseFetchingStrategy.java | 328 ++++++++
...actTrustEngineSignatureValidationComponent.java | 2 +-
.../BaseExpirableMetadataContainer.java} | 36 +-
.../cache/BaseExpirableStatementContainer.java | 97 +++
...icationSecurityConfigurationLookupFunction.java | 117 +++
.../DefaultClientAuthenticationLookupFunction.java | 113 +++
...tEntityStatementContentValidationCondition.java | 181 +++++
...faultEntityStatementMetadataFilterStrategy.java | 120 +++
...ntityStatementSignatureValidationCondition.java | 96 +++
...atementValidationCriteriaSetLookupFunction.java | 116 +++
...tPrivateKeyJwtClientAuthenticationFunction.java | 315 ++++++++
...ltResponseContainerExpirationTimeStrategy.java} | 23 +-
...DefaultTrustChainHeaderValidationCondition.java | 196 +++++
...ederationEndpointEntityStatementCriterion.java} | 25 +-
.../{ => cache}/IssuerEntityIDCriterion.java | 9 +-
.../IssuerEntityStatementCriterion.java | 21 +-
.../PreSelectedTrustChainCriterion.java | 2 +-
.../ResponseContainerExpirationCriterion.java | 2 +-
...ignatureValidationKeyContainerJwtCriterion.java | 2 +-
.../{ => cache}/SubjectEntityIDCriterion.java | 6 +-
.../SubjectEntityStatementCriterion.java | 19 +-
.../SubjectLocallyTrustedKeysCriterion.java | 2 +-
.../SubjectStatementCriterion.java} | 32 +-
.../{ => cache}/TrustAnchorEntityIDsCriterion.java | 2 +-
.../metadata/{ => cache}/TrustMarkCriterion.java | 2 +-
.../{ => cache}/TrustMarkOwnersCriterion.java | 9 +-
...tityConfigurationCriteriaSetLookupFunction.java | 47 ++
...DefaultEntityConfigurationFetchingStrategy.java | 138 ++++
.../EntityConfigurationContainer.java | 59 ++
.../ProvidedEntityConfigurationContainer.java | 54 ++
...videdEntityConfigurationContainerCriterion.java | 88 ++
...faultSignedKeysetCriteriaSetLookupFunction.java | 49 ++
.../DefaultSignedKeysetFetchingStrategy.java | 145 ++++
.../cache/keyset/SignedKeysetCacheIdentifier.java | 105 +++
.../cache/keyset/SignedKeysetContainer.java | 68 ++
.../keyset/SubjectSignedKeysetCriterion.java} | 31 +-
.../keyset/SubjectSignedKeysetUriCriterion.java} | 24 +-
...onfigurationMetadataSkeletonLookupStrategy.java | 18 +-
...ntityConfigurationResponseFetchingStrategy.java | 3 +-
...StatementSignatureValidationFilterStrategy.java | 17 +-
.../local}/DefaultLocalTrustAnchorsValidator.java | 2 +-
...busResponseContainerExpirationTimeStrategy.java | 4 +-
...faultResolveEntityResponseFetchingStrategy.java | 3 +-
.../{ => cache/local}/LocalKeyContainer.java | 8 +-
.../{ => cache/local}/NimbusResponseContainer.java | 2 +-
.../{ => cache/local}/NimbusResponseCriterion.java | 2 +-
.../local}/ResolveEntityRequestCriterion.java | 2 +-
.../local}/ResolveEntityResponseContainer.java | 2 +-
...ultResolveEntityTrustChainFetchingStrategy.java | 162 ++++
.../ResolveEntityCacheContainerIdentifier.java} | 56 +-
.../ResolveEntityCacheIdentifierCriterion.java} | 34 +-
.../resolver/ResolveEntityResponseContainer.java | 69 ++
...inateStatementCriteriaToIdentifierStrategy.java | 14 +-
...efaultSubordinateStatementFetchingStrategy.java | 236 ++++++
.../SubordinateStatementCacheIdentifier.java | 103 +++
.../subordinate/SubordinateStatementContainer.java | 69 ++
.../DefaultTrustChainFetchingStrategy.java | 463 +++++++++++
...rustChainSignatureValidationFilterStrategy.java | 100 ++-
...stChainSubjectIdentifierExtractionStrategy.java | 12 +-
.../trustchain/ProvidedTrustChainContainer.java | 49 ++
.../ProvidedTrustChainContainerCriterion.java} | 34 +-
.../cache/trustchain/TrustChainsContainer.java | 98 +++
.../DefaultTrustMarkFetchingStrategy.java | 158 ++++
.../DefaultTrustMarkStatusFetchingStrategy.java | 144 ++++
...ustMarkValidationCriteriaSetLookupFunction.java | 124 +++
.../cache/trustmark/TrustMarkCacheIdentifier.java} | 57 +-
.../cache/trustmark/TrustMarkContainer.java | 68 ++
.../trustmark/TrustMarkIdentifierCriterion.java} | 34 +-
.../trustmark/TrustMarkStatusCacheIdentifier.java | 103 +++
.../cache/trustmark/TrustMarkStatusContainer.java | 80 ++
.../TrustMarkStatusIdentifierCriterion.java} | 35 +-
.../constraints/FederationPolicyConstraint.java | 15 +-
.../FederationPolicyConstraintHelper.java | 53 +-
.../impl/AbstractFederationPolicyConstraint.java | 17 +-
.../impl/DefaultAllowedEntityTypesConstraint.java | 80 +-
.../impl/DefaultMaxPathLengthConstraint.java | 21 +-
.../impl/DefaultNamingConstraintsConstraint.java | 14 +-
.../metadata/impl/AbstractJWTWrapperImpl.java | 92 +++
.../metadata/impl/EntityConfigurationImpl.java | 65 ++
.../oidfed/metadata/impl/EntityStatementImpl.java | 59 ++
.../metadata/impl/ResolveEntityResponseImpl.java | 64 ++
.../op/oidfed/metadata/impl/SignedKeysetImpl.java | 63 ++
.../metadata/impl/SubordinateStatementImpl.java | 64 ++
.../op/oidfed/metadata/impl/TrustMarkImpl.java | 63 ++
.../oidfed/metadata/impl/TrustMarkStatusImpl.java | 64 ++
.../metadata/jackson/InstantDeserializer.java | 52 ++
.../oidfed/metadata/jackson/JWKDeserializer.java | 72 ++
.../metadata/jackson/JWKSetDeserializer.java | 72 ++
.../LocalKeyContainerDeserializer.java} | 9 +-
.../metadata/payload/claim/impl/MetadataImpl.java | 293 +++++++
.../payload/claim/impl/TrustMarkOwnerImpl.java | 120 +++
.../impl/BaseExpirableSubjectPayloadImpl.java | 102 +++
.../payload/impl/BaseMetadataPayloadImpl.java | 66 ++
.../metadata/payload/impl/BasePayloadImpl.java | 131 +++
.../impl/EntityConfigurationPayloadImpl.java | 186 +++++
.../payload/impl/EntityStatementPayloadImpl.java | 108 +++
.../impl/ResolveEntityResponsePayloadImpl.java | 106 +++
.../payload/impl/SignedKeysetPayloadImpl.java | 82 ++
.../impl/SubordinateStatementPayloadImpl.java | 161 ++++
.../payload/impl/TrustMarkPayloadImpl.java | 149 ++++
.../payload/impl/TrustMarkStatusPayloadImpl.java | 101 +++
.../policy/FederationMetadataPolicyOperator.java | 8 +
...DefaultFederationMetadataPolicyAddOperator.java | 6 +
...ultFederationMetadataPolicyDefaultOperator.java | 6 +
...tFederationMetadataPolicyEssentialOperator.java | 6 +
...faultFederationMetadataPolicyOneOfOperator.java | 6 +
...ltFederationMetadataPolicySubsetOfOperator.java | 6 +
...FederationMetadataPolicySupersetOfOperator.java | 6 +
...faultFederationMetadataPolicyValueOperator.java | 6 +
.../metadata/util/EntityStatementHelper.java | 203 +++++
.../idp/plugin/oidc/op/oidfed/package-info.java | 2 +-
...FederationRegistrationProfileConfiguration.java | 32 +
...nAutomaticRegistrationProfileConfiguration.java | 69 ++
...ionEntityConfigurationProfileConfiguration.java | 6 +-
...onExplicitRegistrationProfileConfiguration.java | 78 ++
...ederationResolveEntityProfileConfiguration.java | 152 +++-
...ederationSignedKeysetProfileConfiguration.java} | 80 +-
.../impl/AbstractBuildEntityStatementAction.java | 3 +-
.../impl/AbstractTokenClaimsSetDecorator.java | 123 +++
.../impl/AbstractTrustChainResolutionAction.java | 110 ++-
.../impl/AddExtensionsToClientInformation.java | 15 +-
...edClientInformationStoreClaimsSetDecorator.java | 145 ++++
...redTrustChainAccessTokenClaimsSetDecorator.java | 54 +-
...stChainAuthorizationCodeClaimsSetDecorator.java | 54 +-
...RegisteredTrustChainIDsClaimsSetDecorator.java} | 16 +-
...edTrustChainRefreshTokenClaimsSetDecorator.java | 54 +-
...eredTrustChainRequestUriClaimsSetDecorator.java | 52 +-
.../profile/impl/BuildEntityConfiguration.java | 17 +-
.../BuildResolveEntityErrorResponseFromEvent.java | 16 +-
.../profile/impl/BuildResolveEntityResponse.java | 33 +-
.../op/oidfed/profile/impl/BuildSignedKeyset.java | 140 ++++
.../oidfed/profile/impl/CallResolveEntityApi.java | 140 ++--
.../impl/DefaultProvidedTrustChainResolver.java | 116 +++
...TrustMarkFromMetadataCacheFetchingFunction.java | 103 +--
.../profile/impl/EntityStatementContext.java | 38 +-
.../impl/FormExplicitRegistrationResponse.java | 18 +-
...ormOutboundFederationConfigurationResponse.java | 21 +-
.../impl/FormOutboundResolveEntityResponse.java | 11 +-
....java => FormOutboundSignedKeysetResponse.java} | 27 +-
.../impl/InitializeEntityStatementContext.java | 10 +-
.../InitializeEntityStatementContextForKeyset.java | 189 +++++
...sponse.java => LookupCachedNimbusResponse.java} | 16 +-
.../impl/LookupCachedResolveEntityResponse.java | 10 +-
.../oidfed/profile/impl/OidFederationEventIds.java | 28 +-
.../op/oidfed/profile/impl/ResolveTrustChains.java | 35 +-
.../op/oidfed/profile/impl/ResolveTrustMarks.java | 81 +-
.../op/oidfed/profile/impl/SelectTrustChain.java | 24 +-
.../profile/impl/StoreAutomaticRegistration.java | 10 +-
...eAutomaticRegistrationProfileConfiguration.java | 113 ++-
.../impl/ValidateProvidedEntityConfiguration.java | 13 +-
.../profile/impl/ValidateProvidedTrustChain.java | 123 ++-
.../profile/impl/ValidateResolveEntityRequest.java | 8 +-
.../profile/impl/ValidateSelectedTrustChain.java | 36 +-
.../op/oidfed/profile/impl/ValidateTrustMarks.java | 247 ++++++
...videdEntityConfigurationValidationStrategy.java | 97 +++
...efaultProvidedTrustChainValidationStrategy.java | 96 +++
...actRequestObjectProvidedTrustChainResolver.java | 146 ++++
...ionRequestObjectProvidedTrustChainResolver.java | 43 +
...mbinedMetadataFromTrustChainLookupStrategy.java | 45 +-
.../DefaultMetadataValidationCondition.java | 1 +
...aultPreSelectedTrustChainIDsLookupStrategy.java | 3 -
...ionRequestObjectProvidedTrustChainResolver.java | 45 ++
...DefaultSelectedTrustChainIDsLookupStrategy.java | 9 +-
...dTrustChainImmediateSuperiorLookupStrategy.java | 5 +-
...ltSelectedTrustChainMetadataLookupStrategy.java | 11 +-
...electedTrustChainTrustAnchorLookupStrategy.java | 4 +-
.../DefaultTrustAnchorHintsLookupStrategy.java | 4 +-
.../DefaultTrustChainIDsLookupStrategy.java | 8 +-
...ultTrustChainMetadataPolicyMergingStrategy.java | 97 +--
.../DefaultTrustChainSelectionStrategy.java | 24 +-
...DefaultTrustChainTrustMarksParsingStrategy.java | 89 +--
...ChainTrustedTrustMarkIssuersLookupStrategy.java | 66 ++
...tChainTrustedTrustMarkOwnersLookupStrategy.java | 61 ++
...tRegistrationRequestClientIDLookupFunction.java | 11 +-
...onRequestEntityConfigurationLookupFunction.java | 7 +-
...entRegistrationRequestJWKSetLookupFunction.java | 11 +-
...ientRegistrationRequestTrustChainResolver.java} | 31 +-
...ormationFederationEntityCredentialResolver.java | 127 +++
...ientInformationSignedKeysetJWKSetDecorator.java | 174 ++++
...faultEntityConfigurationCredentialResolver.java | 21 +-
.../DefaultLocalTrustAnchorCredentialResolver.java | 6 +-
...DefaultPayloadJOSEObjectCredentialResolver.java | 10 +-
...yloadSignatureValidationCredentialResolver.java | 12 +-
...aultSubordinateStatementCredentialResolver.java | 54 +-
.../DefaultTrustMarkOwnerCredentialResolver.java | 24 +-
.../DefaultTrustMarkStatusCredentialResolver.java} | 55 +-
...ticationSignatureSigningParametersResolver.java | 117 +++
.../impl/ConstraintsSyntaxClaimsValidator.java | 100 +++
.../jwt/claims/impl/CritClaimsValidator.java | 97 +++
...faultMetadataPolicyOperatorsLookupStrategy.java | 103 +++
.../impl/MetadataPolicyCritClaimsValidator.java | 105 +++
.../impl/NonEmptyStringArrayClaimsValidator.java | 88 ++
.../impl/TrustMarkOwnersClaimsValidator.java | 81 ++
.../jwt/claims/impl/TrustMarksClaimsValidator.java | 109 +++
.../META-INF/net.shibboleth.idp/postconfig.xml | 883 ++++++++++++++++++---
.../oidfed/metadata-lookup-ext-oidfed-beans.xml | 104 ++-
.../oidfed/metadata-lookup-ext-oidfed-flow.xml | 18 +-
.../entity-configuration-beans.xml | 10 +-
.../entity-configuration-flow.xml | 4 +-
.../idp/flows/oidfed/register/register-beans.xml | 167 ++--
.../oidfed/resolve-entity/resolve-entity-beans.xml | 47 +-
.../oidfed/resolve-entity/resolve-entity-flow.xml | 53 +-
.../signed-keyset-beans.xml} | 53 +-
.../signed-keyset-flow.xml} | 12 +-
.../idp/service/relying-party/postconfig.xml | 45 +-
.../plugin/oidc/op/oidfed/TrustChainTestUtil.java | 76 +-
.../DefaultTrustChainFetchingStrategyTest.java | 365 +++++++++
.../flow/oidfed/AbstractFederationFlowTest.java | 237 ++++--
.../AuthorizeFlowAutomaticRegistrationTest.java | 236 +++++-
.../flow/oidfed/EntityConfigurationFlowTest.java | 63 +-
...shedAuthorizeFlowAutomaticRegistrationTest.java | 106 +++
.../profile/flow/oidfed/RegistrationFlowTest.java | 135 +++-
.../profile/flow/oidfed/ResolveEntityFlowTest.java | 232 +++++-
.../profile/flow/oidfed/SignedKeysetFlowTest.java | 146 ++++
.../oidfed/TokenFlowAutomaticRegistrationTest.java | 66 +-
.../UserInfoFlowAutomaticRegistrationTest.java | 18 +-
.../EntityConfigurationMetadataCacheTest.java | 374 ++++++++-
.../cache/SignedKeysetMetadataCacheTest.java | 233 ++++++
.../SubordinateStatementMetadataCacheTest.java | 665 ++++++++++++++++
.../oidfed/cache/TrustChainMetadataCacheTest.java | 274 +++++++
.../CustomEntityConfigurationFilterStrategy.java | 58 ++
.../CustomSubordinateStatementFilterStrategy.java | 58 ++
.../support/CustomTrustChainFilterStrategy.java | 47 ++
.../credentials/fed-local-intermediate.jwk | 12 +
.../net/shibboleth/idp/module/conf/global.xml | 18 +
.../module/conf/oidfed/oidfed-trust-anchors.json | 11 +
.../idp/module/conf/oidfed/oidfed.properties | 13 +-
.../shibboleth/idp/module/conf/relying-party.xml | 10 +
pom.xml | 11 +-
308 files changed, 16896 insertions(+), 5372 deletions(-)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/LocalKeyContainer.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/BaseJWTWrapper.java (51%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/LocalKeyContainer.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/BasePayload.java (51%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/EntityConfiguration.java (61%)
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/EntityStatement.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/ResolveEntityResponse.java (61%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/SignedKeyset.java (61%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/SubordinateStatement.java (61%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMark.java (64%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMarkStatus.java (62%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{profile/config/OIDFederationAutomaticRegistrationProfileConfiguration.java => metadata/payload/BaseExpirableSubjectPayload.java} (52%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/BaseMetadataPayload.java (60%)
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/EntityConfigurationPayload.java
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/EntityStatementPayload.java
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/ResolveEntityResponsePayload.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/package-info.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/SignedKeysetPayload.java (59%)
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/SubordinateStatementPayload.java
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/TrustMarkPayload.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/OIDFedOPModule.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/TrustMarkStatusPayload.java (50%)
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/claim/Metadata.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/LocalKeyContainer.java => idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/claim/TrustMarkOwner.java (52%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/{config/OIDFederationAutomaticRegistrationProfileConfiguration.java => ProvidedTrustChainResolver.java} (51%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/{OIDFederationAutomaticRegistrationProfileConfiguration.java => OIDFederationSignedKeysetProfileConfiguration.java} (55%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/navigate/{EntityStatementLifetimeLookupFunction.java => ClaimsSetDecorationTypeLookupFunction.java} (68%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/navigate/{MaximumTrustMarkLifetimeLookupFunction.java => ProvidedChainClaimsSetDecorationTypeLookupFunction.java} (66%)
copy idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/navigate/{CachedErrorResponseLifetimeLookupFunction.java => RemoteTrustMarkValidationPredicate.java} (50%)
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/context/AutomaticRegistrationContext.java
create mode 100644 idp-oidfed-op-api/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/context/VerifiedTrustChain.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/messaging/impl/EntityConfigurationResponse.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/messaging/impl/SignedKeysetResponse.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/messaging/impl/TrustMarkResponse.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/messaging/impl/TrustMarkStatusRequest.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/messaging/impl/TrustMarkStatusResponse.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/AbstractEntityStatementSignatureValidationComponent.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/AbstractFederationEndpointResponseFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultEntityConfigurationEndpointExtractionStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultEntityStatementContentValidationFilterStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultEntityStatementFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultEntityStatementSubjectIdentifierExtractionStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultIssuerEntityIDCriteriaToIdentifierStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultProvidedTrustChainValidationStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultResolveEntityRequestCriteriaToIdentifierStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultResolveEntityResponseIdentifierExtractionStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultResolveEntityResponseSignatureValidationFilterStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultResolveEntityTrustChainFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultSubjectEntityIDCriteriaToIdentifierStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultSubordinateStatementEndpointExtractionStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultSubordinateStatementIdentifierExtractionStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultSubordinateStatementSignatureValidationFilterStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustChainExpirationTimeStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustChainFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustChainTrustedTrustMarkIssuersLookupStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustChainTrustedTrustMarkOwnersLookupStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustMarkFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustMarkResponseSignatureValidationFilterStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustMarkStatusFetchingStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/DefaultTrustMarkStatusResponseSignatureValidationFilterStrategy.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/EntityStatementHelper.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMarkRequestCriterion.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMarkResponseContainer.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMarkStatusRequestCriterion.java
delete mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/TrustMarkStatusResponseContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/AbstractFederationEndpointResponseFetchingStrategy.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/AbstractTrustEngineSignatureValidationComponent.java (98%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{NimbusResponseContainer.java => cache/BaseExpirableMetadataContainer.java} (62%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/BaseExpirableStatementContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultAuthenticationSecurityConfigurationLookupFunction.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultClientAuthenticationLookupFunction.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultEntityStatementContentValidationCondition.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultEntityStatementMetadataFilterStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultEntityStatementSignatureValidationCondition.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultEntityStatementValidationCriteriaSetLookupFunction.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultPrivateKeyJwtClientAuthenticationFunction.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{DefaultEntityStatementExpirationTimeStrategy.java => cache/DefaultResponseContainerExpirationTimeStrategy.java} (55%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/DefaultTrustChainHeaderValidationCondition.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{IssuerEntityStatementCriterion.java => cache/FederationEndpointEntityStatementCriterion.java} (59%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/IssuerEntityIDCriterion.java (86%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/IssuerEntityStatementCriterion.java (73%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/PreSelectedTrustChainCriterion.java (97%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/ResponseContainerExpirationCriterion.java (97%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/SignatureValidationKeyContainerJwtCriterion.java (97%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/SubjectEntityIDCriterion.java (91%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/SubjectEntityStatementCriterion.java (75%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/SubjectLocallyTrustedKeysCriterion.java (97%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{SubjectEntityIDCriterion.java => cache/SubjectStatementCriterion.java} (58%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/TrustAnchorEntityIDsCriterion.java (97%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/TrustMarkCriterion.java (96%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache}/TrustMarkOwnersCriterion.java (84%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/configuration/DefaultEntityConfigurationCriteriaSetLookupFunction.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/configuration/DefaultEntityConfigurationFetchingStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/configuration/EntityConfigurationContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/configuration/ProvidedEntityConfigurationContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/configuration/ProvidedEntityConfigurationContainerCriterion.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/keyset/DefaultSignedKeysetCriteriaSetLookupFunction.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/keyset/DefaultSignedKeysetFetchingStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/keyset/SignedKeysetCacheIdentifier.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/keyset/SignedKeysetContainer.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{SubjectEntityIDCriterion.java => cache/keyset/SubjectSignedKeysetCriterion.java} (58%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{SubjectEntityIDCriterion.java => cache/keyset/SubjectSignedKeysetUriCriterion.java} (65%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultEntityConfigurationMetadataSkeletonLookupStrategy.java (84%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultEntityConfigurationResponseFetchingStrategy.java (93%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultEntityStatementSignatureValidationFilterStrategy.java (72%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultLocalTrustAnchorsValidator.java (96%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultNimbusResponseContainerExpirationTimeStrategy.java (94%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/DefaultResolveEntityResponseFetchingStrategy.java (94%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/LocalKeyContainer.java (81%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/NimbusResponseContainer.java (96%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/NimbusResponseCriterion.java (96%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/ResolveEntityRequestCriterion.java (96%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/local}/ResolveEntityResponseContainer.java (96%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/resolver/DefaultResolveEntityTrustChainFetchingStrategy.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{messaging/impl/ResolveEntityRequest.java => metadata/cache/resolver/ResolveEntityCacheContainerIdentifier.java} (70%)
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{NimbusResponseCriterion.java => cache/resolver/ResolveEntityCacheIdentifierCriterion.java} (55%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/resolver/ResolveEntityResponseContainer.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/subordinate}/DefaultSubordinateStatementCriteriaToIdentifierStrategy.java (86%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/subordinate/DefaultSubordinateStatementFetchingStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/subordinate/SubordinateStatementCacheIdentifier.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/subordinate/SubordinateStatementContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustchain/DefaultTrustChainFetchingStrategy.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/trustchain}/DefaultTrustChainSignatureValidationFilterStrategy.java (51%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{ => cache/trustchain}/DefaultTrustChainSubjectIdentifierExtractionStrategy.java (77%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustchain/ProvidedTrustChainContainer.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{SubjectEntityIDCriterion.java => cache/trustchain/ProvidedTrustChainContainerCriterion.java} (52%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustchain/TrustChainsContainer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/DefaultTrustMarkFetchingStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/DefaultTrustMarkStatusFetchingStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/DefaultTrustMarkValidationCriteriaSetLookupFunction.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{messaging/impl/TrustMarkRequest.java => metadata/cache/trustmark/TrustMarkCacheIdentifier.java} (66%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/TrustMarkContainer.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{NimbusResponseCriterion.java => cache/trustmark/TrustMarkIdentifierCriterion.java} (57%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/TrustMarkStatusCacheIdentifier.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustmark/TrustMarkStatusContainer.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{SubjectLocallyTrustedKeysCriterion.java => cache/trustmark/TrustMarkStatusIdentifierCriterion.java} (55%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/AbstractJWTWrapperImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/EntityConfigurationImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/EntityStatementImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/ResolveEntityResponseImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/SignedKeysetImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/SubordinateStatementImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/TrustMarkImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/impl/TrustMarkStatusImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/jackson/InstantDeserializer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/jackson/JWKDeserializer.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/jackson/JWKSetDeserializer.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/{JWKSetDeserializer.java => jackson/LocalKeyContainerDeserializer.java} (84%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/claim/impl/MetadataImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/claim/impl/TrustMarkOwnerImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/BaseExpirableSubjectPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/BaseMetadataPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/BasePayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/EntityConfigurationPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/EntityStatementPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/ResolveEntityResponsePayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/SignedKeysetPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/SubordinateStatementPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/TrustMarkPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/payload/impl/TrustMarkStatusPayloadImpl.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/util/EntityStatementHelper.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/config/impl/{DefaultOIDFederationEntityConfigurationProfileConfiguration.java => DefaultOIDFederationSignedKeysetProfileConfiguration.java} (71%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/AbstractTokenClaimsSetDecorator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/AutoRegisteredClientInformationStoreClaimsSetDecorator.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/{AutoRegisteredTrustChainAuthorizationCodeClaimsSetDecorator.java => AutoRegisteredTrustChainIDsClaimsSetDecorator.java} (81%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/BuildSignedKeyset.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/DefaultProvidedTrustChainResolver.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/{FormOutboundFederationConfigurationResponse.java => FormOutboundSignedKeysetResponse.java} (88%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/InitializeEntityStatementContextForKeyset.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/{LookupCachedEntityConfigurationResponse.java => LookupCachedNimbusResponse.java} (89%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/impl/ValidateTrustMarks.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/logic/DefaultProvidedEntityConfigurationValidationStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/logic/DefaultProvidedTrustChainValidationStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/AbstractRequestObjectProvidedTrustChainResolver.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/DefaultAuthorizationRequestObjectProvidedTrustChainResolver.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => profile/navigate}/DefaultCombinedMetadataFromTrustChainLookupStrategy.java (67%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/DefaultPushedAuthorizationRequestObjectProvidedTrustChainResolver.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => profile/navigate}/DefaultTrustChainTrustMarksParsingStrategy.java (53%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/DefaultTrustChainTrustedTrustMarkIssuersLookupStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/DefaultTrustChainTrustedTrustMarkOwnersLookupStrategy.java
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/profile/navigate/{ExplicitClientRegistrationRequestTrustChainLookupFunction.java => ExplicitClientRegistrationRequestTrustChainResolver.java} (52%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/credential/ClientInformationFederationEntityCredentialResolver.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/credential/ClientInformationSignedKeysetJWKSetDecorator.java
copy idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultEntityConfigurationCredentialResolver.java (81%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultLocalTrustAnchorCredentialResolver.java (93%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultPayloadJOSEObjectCredentialResolver.java (90%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultPayloadSignatureValidationCredentialResolver.java (87%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultSubordinateStatementCredentialResolver.java (59%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata => security/credential}/DefaultTrustMarkOwnerCredentialResolver.java (80%)
rename idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/{metadata/DefaultEntityConfigurationCredentialResolver.java => security/credential/DefaultTrustMarkStatusCredentialResolver.java} (50%)
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jose/impl/EndpointAuthenticationSignatureSigningParametersResolver.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/ConstraintsSyntaxClaimsValidator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/CritClaimsValidator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/DefaultMetadataPolicyOperatorsLookupStrategy.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/MetadataPolicyCritClaimsValidator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/NonEmptyStringArrayClaimsValidator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/TrustMarkOwnersClaimsValidator.java
create mode 100644 idp-oidfed-op-impl/src/main/java/net/shibboleth/idp/plugin/oidc/op/oidfed/security/jwt/claims/impl/TrustMarksClaimsValidator.java
copy idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/{entity-configuration/entity-configuration-beans.xml => signed-keyset/signed-keyset-beans.xml} (80%)
copy idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/{entity-configuration/entity-configuration-flow.xml => signed-keyset/signed-keyset-flow.xml} (75%)
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustchain/DefaultTrustChainFetchingStrategyTest.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/SignedKeysetFlowTest.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/SignedKeysetMetadataCacheTest.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/SubordinateStatementMetadataCacheTest.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/TrustChainMetadataCacheTest.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomEntityConfigurationFilterStrategy.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomSubordinateStatementFilterStrategy.java
create mode 100644 idp-oidfed-op-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomTrustChainFilterStrategy.java
create mode 100644 idp-oidfed-op-impl/src/test/resources/credentials/fed-local-intermediate.jwk
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list