[java-idp-oidc] branch main updated: JCOMOIDC-161 - Facilitate extending the credential resolvers for RP/OP metadata

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-oidc/commit/e1df8be5a7daae4dd688be876d2b27b4a60687c7

The following commit(s) were added to refs/heads/main by this push:
     new e1df8be5 JCOMOIDC-161 - Facilitate extending the credential resolvers for RP/OP metadata
e1df8be5 is described below

commit e1df8be5a7daae4dd688be876d2b27b4a60687c7
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Mon Nov 2 13:06:43 2026 +0200

    JCOMOIDC-161 - Facilitate extending the credential resolvers for RP/OP metadata
    
    https://shibboleth.atlassian.net/browse/JCOMOIDC-161
    
    - Wire PRC via optional lookup strategy for additional criteria
---
 .../flows/oauth2/dpop-proof-validation/dpop-proof-validation-beans.xml | 3 +++
 .../flows/oauth2/pushed-authorization/pushed-authorization-beans.xml   | 3 +++
 .../net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml        | 3 +++
 .../net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml    | 3 +++
 4 files changed, 12 insertions(+)

diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/dpop-proof-validation/dpop-proof-validation-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/dpop-proof-validation/dpop-proof-validation-beans.xml
index 0685e549..3e03a7aa 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/dpop-proof-validation/dpop-proof-validation-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/dpop-proof-validation/dpop-proof-validation-beans.xml
@@ -91,6 +91,9 @@
                                     c:outputType="#{T(com.nimbusds.jwt.SignedJWT)}"
                                     c:expression="#input.getParent().ensureInboundMessageContext().ensureSubcontext(T(net.shibboleth.idp.plugin.oidc.op.oauth2.messaging.context.OAuth2DPoPProofContext)).getDpopProof()" />
                             </property>
+                            <property name="additionalCriteriaLookupStrategy">
+                                <bean class="net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler.ProfileRequestContextCriteriaSetBuilder" />
+                            </property>
                         </bean>
                     </list>
                 </property>
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
index beb01c64..12e5ee7f 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth2/pushed-authorization/pushed-authorization-beans.xml
@@ -194,6 +194,9 @@
                                     c:_0="#{ T(org.opensaml.messaging.context.MessageContext) }"
                                     c:expression="#input.ensureSubcontext(T(net.shibboleth.oidc.metadata.context.OIDCMetadataContext)).getClientInformation()" />
                             </property>
+                            <property name="additionalCriteriaLookupStrategy">
+                                <bean class="net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler.ProfileRequestContextCriteriaSetBuilder" />
+                            </property>
                         </bean>
                     </list>
                 </property>
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
index 9b0dfd35..f47199a0 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/authorize/authorize-beans.xml
@@ -316,6 +316,9 @@
                                     c:_0="#{ T(org.opensaml.messaging.context.MessageContext) }"
                                     c:expression="#input.ensureSubcontext(T(net.shibboleth.oidc.metadata.context.OIDCMetadataContext)).getClientInformation()" />
                             </property>
+                            <property name="additionalCriteriaLookupStrategy">
+                                <bean class="net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler.ProfileRequestContextCriteriaSetBuilder" />
+                            </property>
                         </bean>
                     </list>
                 </property>
diff --git a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
index 7682bade..ea6d2719 100644
--- a/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
+++ b/idp-oidc-extension-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidc/end-session/end-session-beans.xml
@@ -166,6 +166,9 @@
                                     c:_0="#{ T(org.opensaml.messaging.context.MessageContext) }"
                                     c:expression="#input.getSubcontext(T(net.shibboleth.oidc.metadata.context.OIDCMetadataContext)).getClientInformation()" />
                             </property>
+                            <property name="additionalCriteriaLookupStrategy">
+                                <bean class="net.shibboleth.oidc.security.impl.BaseJWTSignatureSecurityHandler.ProfileRequestContextCriteriaSetBuilder" />
+                            </property>
                         </bean>
                     </list>
                 </property>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.