[java-plugin-shibd-oidc] branch main updated: JSHIBDOIDC-15 - Add post data preservation

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-oidc/commit/d881e99d89aea19ae62a8878f595de55dc546c89

The following commit(s) were added to refs/heads/main by this push:
     new d881e99  JSHIBDOIDC-15 - Add post data preservation
d881e99 is described below

commit d881e99d89aea19ae62a8878f595de55dc546c89
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon May 11 10:55:48 2026 +0100

    JSHIBDOIDC-15 - Add post data preservation
    
    https://shibboleth.atlassian.net/browse/JSHIBDOIDC-15
---
 .../net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml     | 9 +++++++++
 .../net/shibboleth/idp/flows/sp/consumer/oidc/oidc-flow.xml      | 1 +
 .../net/shibboleth/idp/flows/sp/initiator/oidc/oidc-flow.xml     | 1 +
 3 files changed, 11 insertions(+)

diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
index d2921cd..170e208 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-beans.xml
@@ -522,6 +522,15 @@
         </property>
     </bean>
     
+    <bean id="RecoverPostData"
+        class="net.shibboleth.sp.profile.impl.RecoverPostData" scope="prototype"    
+        p:storageService-ref="#{'%{sp.postData.StorageService:shibboleth.StorageService}'.trim()}"
+        p:cookieManager-ref="shibboleth.sp.RemotedCookieManager"
+        p:cookiePrefix="#{'%{sp.postData.cookiePrefix:__Host-shibsp_post_}'.trim()}"
+        p:velocityEngine-ref="shibboleth.VelocityEngine"
+        p:cSPDigester-ref="shibboleth.CSPDigester"
+        p:cSPNonceGenerator-ref="shibboleth.CSPNonce"/>
+    
     <bean id="PrepareAgentResponse" class="net.shibboleth.sp.oidc.profile.impl.PrepareAgentResponse" scope="prototype"
      p:attributeContextLookupStrategy-ref="shibboleth.ChildLookup.AttributeContextFromEndUserClaimsContext"
      p:dataSealer-ref="#{'%{sp.dataSealer:shibboleth.DataSealer}'.trim()}"/>
diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-flow.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-flow.xml
index 99f0586..274e28f 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-flow.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/consumer/oidc/oidc-flow.xml
@@ -73,6 +73,7 @@
     <action-state id="FinalizeResponse">
         <evaluate expression="ProcessEndUserClaims" />       
         <evaluate expression="ExtractOIDCClaims"/>
+        <evaluate expression="RecoverPostData" />
         <evaluate expression="PrepareAgentResponse"/>
         <evaluate expression="'proceed'" />        
         <transition on="proceed" to="proceed" />   
diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/initiator/oidc/oidc-flow.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/initiator/oidc/oidc-flow.xml
index f4f38de..297154b 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/initiator/oidc/oidc-flow.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/sp/initiator/oidc/oidc-flow.xml
@@ -49,6 +49,7 @@
         <!-- Must map authentication state to a state token first, so we can add the token to the state in HandleOutboundMessage -->
         <evaluate expression="CreateAuthenticationStateData"/> 
         <evaluate expression="PreserveState"/>
+        <evaluate expression="PreservePostData" />
         <evaluate expression="HandleOutboundMessage" />
         <evaluate expression="EncodeMessage" />
         <evaluate expression="'proceed'" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.