[java-plugin-shibd-saml] branch main updated: Add initial declarations for SAML logout consumers.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-saml.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-saml/commit/7a16d9597fe926ef1b9cade937b5f4dc3f3853df

The following commit(s) were added to refs/heads/main by this push:
     new 7a16d95  Add initial declarations for SAML logout consumers.
7a16d95 is described below

commit 7a16d9597fe926ef1b9cade937b5f4dc3f3853df
Author: Scott Cantor <scott at restingparrotsoftware.com>
AuthorDate: Wed May 20 09:40:49 2026 -0400

    Add initial declarations for SAML logout consumers.
---
 .../META-INF/net.shibboleth.idp/postconfig.xml     | 85 ++++++++++++++++++++++
 .../net/shibboleth/sp/service/agent/postconfig.xml |  3 +-
 2 files changed, 87 insertions(+), 1 deletion(-)

diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index ac872ba..6a77b33 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -79,4 +79,89 @@
         </property>
     </bean>
 
+    <!-- Logout consumer descriptors for each SAML binding. -->
+    
+    <bean p:id="sp/logout/consumer/saml2/redirect" class="net.shibboleth.sp.profile.BasicLogoutConsumerFlowDescriptor">
+        <property name="activationCondition">
+            <bean class="net.shibboleth.sp.profile.context.logic.HttpServletRequestPredicate"
+                    p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier">
+                <property name="httpServletRequestValidator">
+                    <bean class="net.shibboleth.shared.servlet.impl.ChainingHttpServletRequestValidator">
+                        <property name="validators">
+                            <list>
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestMethodValidator"
+                                    p:allowedMethods="GET" />
+                                <ref bean="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.Redirect.RequestOrResponse" />
+                            </list>
+                        </property>
+                    </bean>
+                </property>
+            </bean>
+        </property>
+    </bean>
+    
+    <bean p:id="sp/logout/consumer/saml2/post" class="net.shibboleth.sp.profile.BasicLogoutConsumerFlowDescriptor">
+        <property name="activationCondition">
+            <bean class="net.shibboleth.sp.profile.context.logic.HttpServletRequestPredicate"
+                    p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier">
+                <property name="httpServletRequestValidator">
+                    <bean class="net.shibboleth.shared.servlet.impl.ChainingHttpServletRequestValidator">
+                        <property name="validators">
+                            <list>
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestMethodValidator"
+                                    p:allowedMethods="POST" />
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestContentTypeValidator"
+                                    p:allowedContentTypes="application/x-www-form-urlencoded" />
+                                <ref bean="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.POST.RequestOrResponse" />
+                            </list>
+                        </property>
+                    </bean>
+                </property>
+            </bean>
+        </property>
+    </bean>
+
+    <bean p:id="sp/logout/consumer/saml2/post-simplesign" class="net.shibboleth.sp.profile.BasicLogoutConsumerFlowDescriptor">
+        <property name="activationCondition">
+            <bean class="net.shibboleth.sp.profile.context.logic.HttpServletRequestPredicate"
+                    p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier">
+                <property name="httpServletRequestValidator">
+                    <bean class="net.shibboleth.shared.servlet.impl.ChainingHttpServletRequestValidator">
+                        <property name="validators">
+                            <list>
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestMethodValidator"
+                                    p:allowedMethods="POST" />
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestContentTypeValidator"
+                                    p:allowedContentTypes="application/x-www-form-urlencoded" />
+                                <ref bean="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.POSTSimpleSign.RequestOrResponse" />
+                            </list>
+                        </property>
+                    </bean>
+                </property>
+            </bean>
+        </property>
+    </bean>
+
+    <bean p:id="sp/logout/consumer/saml2/artifact" class="net.shibboleth.sp.profile.BasicLogoutConsumerFlowDescriptor">
+        <property name="activationCondition">
+            <bean class="net.shibboleth.sp.profile.context.logic.HttpServletRequestPredicate"
+                    p:httpServletRequestSupplier-ref="shibboleth.RemotedHttpServletRequestSupplier">
+                <property name="httpServletRequestValidator">
+                    <bean class="net.shibboleth.shared.servlet.impl.ChainingHttpServletRequestValidator">
+                        <property name="validators">
+                            <list>
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestMethodValidator"
+                                    p:allowedMethods="#{{ 'GET', 'POST' }}" />
+                                <bean class="net.shibboleth.shared.servlet.impl.BasicHttpServletRequestContentTypeValidator"
+                                    p:allowedContentTypes="application/x-www-form-urlencoded"
+                                    p:allowNullContentType="true" />
+                                <ref bean="shibboleth.HttpServletRequestValidator.BasicParams.SAML2.Artifact" />
+                            </list>
+                        </property>
+                    </bean>
+                </property>
+            </bean>
+        </property>
+    </bean>
+
 </beans>
diff --git a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
index a7fbdcd..1136d01 100644
--- a/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
+++ b/sp-saml-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
@@ -23,7 +23,8 @@
             p:metadataResolver-ref="shibboleth.MetadataResolverService"
             p:sessionInitiators="saml2"
             p:logoutInitiators="saml2"
-            p:tokenConsumers="#{{ 'saml2/post', 'saml2/post-simplesign', 'saml2/artifact' }}">
+            p:tokenConsumers="#{{ 'saml2/post', 'saml2/post-simplesign', 'saml2/artifact' }}"
+            p:logoutConsumers="#{{ 'saml2/redirect', 'saml2/post', 'saml2/post-simplesign', 'saml2/artifact' }}">
         <property name="id">
             <util:constant static-field="net.shibboleth.sp.saml.saml2.SAML2ProtocolSupportService.PROTOCOL_ID" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.