[java-oidfed-common] branch main updated (5e8676b -> 009ab5b)
Codeberg
noreply at shibboleth.net
Fri May 15 07:49:28 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a change to branch main
in repository java-oidfed-common.
from 5e8676b Initial (incomplete) import from java-idp-plugin-oidc-op-oidfed
new c0302fc Import generic security classes from java-idp-plugin-oidc-op-oidfed
new 5e2200f New 'oidfed-common-conf-impl' module for common configuration
new 009ab5b Import and refactor entity-configuration flow from java-idp-plugin-oidc-op-oidfed
The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.gitignore | 3 +-
...a => EntityConfigurationMetadataDecorator.java} | 17 +-
...ntityConfigurationMetadataDecoratorManager.java | 73 ++
.../oidfed/profile/OidFederationEventIds.java | 84 +++
.../support/ClientInformationExtensionSupport.java | 95 +++
oidfed-common-conf-impl/pom.xml | 483 ++++++++++++
.../META-INF/net.shibboleth.idp/postconfig.xml | 673 ++++-------------
.../entity-configuration-beans.xml | 280 +++++++
.../entity-configuration-flow.xml | 121 +++
.../idp/service/relying-party/postconfig.xml | 108 +++
.../DefaultTrustChainFetchingStrategyTest.java | 365 +++++++++
.../flow/oidfed/AbstractFederationFlowTest.java | 839 +++++++++++++++++++++
.../flow/oidfed/EntityConfigurationFlowTest.java | 160 ++++
.../EntityConfigurationMetadataCacheTest.java | 594 +++++++++++++++
.../cache/SignedKeysetMetadataCacheTest.java | 233 ++++++
.../SubordinateStatementMetadataCacheTest.java | 665 ++++++++++++++++
.../oidfed/cache/TrustChainMetadataCacheTest.java | 274 +++++++
.../CustomEntityConfigurationFilterStrategy.java | 58 ++
...CustomEntityConfigurationMetadataDecorator.java | 46 ++
.../CustomSubordinateStatementFilterStrategy.java | 58 ++
.../support/CustomTrustChainFilterStrategy.java | 47 ++
.../shibboleth/oidfed/test/TrustChainTestUtil.java | 164 ++++
.../resources/credentials/fed-local-anchor.jwk | 13 +
.../credentials/fed-local-intermediate.jwk | 12 +
.../resources/credentials/fed-signing-es256.jwk | 10 +
.../resources/credentials/fed-signing-es384.jwk | 9 +
.../resources/credentials/fed-signing-es521.jwk | 9 +
.../test/resources/credentials/fed-signing-rs.jwk | 8 +
.../net/shibboleth/idp/module/conf/credentials.xml | 70 ++
.../net/shibboleth/idp/module/conf/global.xml | 53 ++
.../net/shibboleth/idp/module/conf/idp.properties | 210 ++++++
.../net/shibboleth/idp/module/conf/logback.xml | 197 +++++
.../idp/module/conf/metadata-providers.xml | 28 +
.../idp/module/conf/oidfed/oidfed-credentials.xml | 37 +
.../oidfed/oidfed-entity-configuration-claims.xml | 44 ++
.../oidfed-entity-configuration-metadata.json | 11 +
.../module/conf/oidfed/oidfed-trust-anchors.json | 24 +
.../conf/oidfed/oidfed-trustchain-resolver.xml | 25 +
.../idp/module/conf/oidfed/oidfed.properties | 13 +
.../shibboleth/idp/module/conf/relying-party.xml | 33 +
.../net/shibboleth/idp/module/conf/services.xml | 92 +++
oidfed-common-impl/pom.xml | 10 +
.../impl/AbstractBuildEntityStatementAction.java | 301 ++++++++
.../profile/impl/BuildEntityConfiguration.java | 215 ++++++
...TrustMarkFromMetadataCacheFetchingFunction.java | 205 +++++
.../profile/impl/EntityStatementContext.java | 133 ++++
.../impl/EntityStatementUpdateStrategy.java | 57 ++
...ormOutboundFederationConfigurationResponse.java | 214 ++++++
.../impl/InitializeEntityStatementContext.java | 165 ++++
...ClaimsSetFromEntityStatementLookupFunction.java | 85 +++
.../profile/impl/LookupCachedNimbusResponse.java | 141 ++++
.../impl/RelyingPartyCachedMessageContext.java | 75 ++
...ntityConfigurationTrustMarksLookupStrategy.java | 77 ++
.../DefaultTrustAnchorHintsLookupStrategy.java | 89 +++
...ormationFederationEntityCredentialResolver.java | 127 ++++
...faultEntityConfigurationCredentialResolver.java | 90 +++
.../DefaultLocalTrustAnchorCredentialResolver.java | 109 +++
...DefaultPayloadJOSEObjectCredentialResolver.java | 84 +++
...yloadSignatureValidationCredentialResolver.java | 82 ++
...aultSubordinateStatementCredentialResolver.java | 121 +++
.../DefaultTrustMarkOwnerCredentialResolver.java | 91 +++
.../DefaultTrustMarkStatusCredentialResolver.java | 102 +++
...ticationSignatureSigningParametersResolver.java | 117 +++
.../impl/ConstraintsSyntaxClaimsValidator.java | 100 +++
.../jwt/claims/impl/CritClaimsValidator.java | 97 +++
...faultMetadataPolicyOperatorsLookupStrategy.java | 103 +++
.../impl/MetadataPolicyCritClaimsValidator.java | 105 +++
.../impl/NonEmptyStringArrayClaimsValidator.java | 88 +++
.../impl/TrustMarkOwnersClaimsValidator.java | 81 ++
.../jwt/claims/impl/TrustMarksClaimsValidator.java | 109 +++
pom.xml | 1 +
71 files changed, 9192 insertions(+), 520 deletions(-)
copy oidfed-common-api/src/main/java/net/shibboleth/oidfed/profile/{ProvidedTrustChainResolver.java => EntityConfigurationMetadataDecorator.java} (58%)
create mode 100644 oidfed-common-api/src/main/java/net/shibboleth/oidfed/profile/EntityConfigurationMetadataDecoratorManager.java
create mode 100644 oidfed-common-api/src/main/java/net/shibboleth/oidfed/profile/OidFederationEventIds.java
create mode 100644 oidfed-common-api/src/main/java/net/shibboleth/oidfed/support/ClientInformationExtensionSupport.java
create mode 100644 oidfed-common-conf-impl/pom.xml
rename {oidfed-common-impl => oidfed-common-conf-impl}/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml (56%)
create mode 100644 oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/entity-configuration/entity-configuration-beans.xml
create mode 100644 oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/entity-configuration/entity-configuration-flow.xml
create mode 100644 oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/oidfed/metadata/cache/trustchain/DefaultTrustChainFetchingStrategyTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/AbstractFederationFlowTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/EntityConfigurationFlowTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/EntityConfigurationMetadataCacheTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/SignedKeysetMetadataCacheTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/SubordinateStatementMetadataCacheTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/cache/TrustChainMetadataCacheTest.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomEntityConfigurationFilterStrategy.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomEntityConfigurationMetadataDecorator.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomSubordinateStatementFilterStrategy.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/idp/plugin/oidc/op/profile/flow/oidfed/support/CustomTrustChainFilterStrategy.java
create mode 100644 oidfed-common-conf-impl/src/test/java/net/shibboleth/oidfed/test/TrustChainTestUtil.java
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-local-anchor.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-local-intermediate.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-signing-es256.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-signing-es384.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-signing-es521.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/credentials/fed-signing-rs.jwk
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/credentials.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/global.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/idp.properties
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/logback.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/metadata-providers.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed-credentials.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed-entity-configuration-claims.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed-entity-configuration-metadata.json
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed-trust-anchors.json
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed-trustchain-resolver.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/oidfed/oidfed.properties
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/relying-party.xml
create mode 100644 oidfed-common-conf-impl/src/test/resources/net/shibboleth/idp/module/conf/services.xml
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/AbstractBuildEntityStatementAction.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/BuildEntityConfiguration.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/DefaultTrustMarkFromMetadataCacheFetchingFunction.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/EntityStatementContext.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/EntityStatementUpdateStrategy.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/FormOutboundFederationConfigurationResponse.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/InitializeEntityStatementContext.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/JWTClaimsSetFromEntityStatementLookupFunction.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/LookupCachedNimbusResponse.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/RelyingPartyCachedMessageContext.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/navigate/DefaultEntityConfigurationTrustMarksLookupStrategy.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/navigate/DefaultTrustAnchorHintsLookupStrategy.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/ClientInformationFederationEntityCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultEntityConfigurationCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultLocalTrustAnchorCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultPayloadJOSEObjectCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultPayloadSignatureValidationCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultSubordinateStatementCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultTrustMarkOwnerCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/credential/DefaultTrustMarkStatusCredentialResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jose/impl/EndpointAuthenticationSignatureSigningParametersResolver.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/ConstraintsSyntaxClaimsValidator.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/CritClaimsValidator.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/DefaultMetadataPolicyOperatorsLookupStrategy.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/MetadataPolicyCritClaimsValidator.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/NonEmptyStringArrayClaimsValidator.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/TrustMarkOwnersClaimsValidator.java
create mode 100644 oidfed-common-impl/src/main/java/net/shibboleth/oidfed/security/jwt/claims/impl/TrustMarksClaimsValidator.java
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list