[java-oidfed-common] 02/02: Add new hooks for oidfed/resolve-trust-chain to serve OP's explicit registration flow

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-oidfed-common.

View the commit online:
https://codeberg.org/Shibboleth/java-oidfed-common/commit/07413d08bb16083a3fbe9b215c1ae48bc04ac030

commit 07413d08bb16083a3fbe9b215c1ae48bc04ac030
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri May 22 18:27:57 2026 +0300

    Add new hooks for oidfed/resolve-trust-chain to serve OP's explicit registration flow
    
    - shibboleth.oidfed.trust-chain-resolver.RequireEntityConfigurationCondition, defaults to always false
    - shibboleth.oidfed.trust-chain-resolver.EntityConfigurationLookupStrategy, defaults to always null
---
 .../oidfed/resolve-trust-chains/resolve-trust-chains-beans.xml | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/resolve-trust-chains/resolve-trust-chains-beans.xml b/oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/resolve-trust-chains/resolve-trust-chains-beans.xml
index cc5e1ab..40146db 100644
--- a/oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/resolve-trust-chains/resolve-trust-chains-beans.xml
+++ b/oidfed-common-conf-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/resolve-trust-chains/resolve-trust-chains-beans.xml
@@ -14,7 +14,11 @@
         p:objectMapper-ref="shibboleth.oidfed.JWTPayloadJSONObjectMapper"
         p:trustedEntitiesLookupStrategy="#{getObject('shibboleth.oidfed.TrustedRemoteResolverEntitiesLookupStrategy') ?: getObject('shibboleth.oidfed.DefaultTrustedRemoteResolverEntitiesLookupStrategy')}"
         p:preSelectedTrustChainIdsLookupStrategy="#{getObject('shibboleth.oidfed.PreSelectedTrustChainIDsLookupStrategy') ?: getObject('shibboleth.oidfed.DefaultPreSelectedTrustChainIDsLookupStrategy')}"
-        p:entityIDLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityIDLookupStrategy') ?: getObject('shibboleth.oidfed.shibboleth.oidfed.trust-chain-resolver.DefaultEntityIDLookupStrategy')}"/>
+        p:entityIDLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityIDLookupStrategy') ?: getObject('shibboleth.oidfed.shibboleth.oidfed.trust-chain-resolver.DefaultEntityIDLookupStrategy')}"
+        p:requireEntityConfigurationCondition="#{getObject('shibboleth.oidfed.trust-chain-resolver.RequireEntityConfigurationCondition') ?: getObject('shibboleth.Conditions.FALSE')}"
+        p:entityConfigurationLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityConfigurationLookupStrategy') ?: getObject('ConstantNull')}"/>
+
+    <bean id="ConstantNull" parent="shibboleth.Functions.Constant" c:target="#{null}" />
 
     <bean id="ResolveTrustChains" class="net.shibboleth.oidfed.profile.impl.ResolveTrustChains"
         scope="prototype"
@@ -25,7 +29,9 @@
         p:arraysAsSpaceSeparatedList="%{idp.oidfed.policy.arraysAsSpaceSeparatedList:scope}"
         p:metadataValidationCondition-ref="#{'%{idp.oidfed.MetadataValidationCondition:DefaultMetadataValidationCondition}'.trim()}"
         p:federationPolicyConstraints-ref="%{idp.oidfed.FederationPolicyConstraints:shibboleth.oidfed.DefaultFederationPolicyConstraints}"
-        p:entityIDLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityIDLookupStrategy') ?: getObject('shibboleth.oidfed.shibboleth.oidfed.trust-chain-resolver.DefaultEntityIDLookupStrategy')}">
+        p:entityIDLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityIDLookupStrategy') ?: getObject('shibboleth.oidfed.shibboleth.oidfed.trust-chain-resolver.DefaultEntityIDLookupStrategy')}"
+        p:requireEntityConfigurationCondition="#{getObject('shibboleth.oidfed.trust-chain-resolver.RequireEntityConfigurationCondition') ?: getObject('shibboleth.Conditions.FALSE')}"
+        p:entityConfigurationLookupStrategy="#{getObject('shibboleth.oidfed.trust-chain-resolver.EntityConfigurationLookupStrategy') ?: getObject('ConstantNull')}">
         <property name="metadataLookupStrategy">
             <bean class="net.shibboleth.oidfed.profile.navigate.DefaultCombinedMetadataFromTrustChainLookupStrategy" />
         </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.