[java-plugin-shibd-oidc] branch main updated: Default internal attribute resolution to false

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-plugin-shibd-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-oidc/commit/d8dcc014b2d1278b555f683f5a38fc88dbafc156

The following commit(s) were added to refs/heads/main by this push:
     new d8dcc01  Default internal attribute resolution to false
d8dcc01 is described below

commit d8dcc014b2d1278b555f683f5a38fc88dbafc156
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Nov 2 14:10:22 2026 +0000

    Default internal attribute resolution to false
---
 .../resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
index 6b38143..b532471 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/agent/postconfig.xml
@@ -83,7 +83,7 @@
         p:issuer="#{getObject('shibboleth.oidc.issuer')}"        
         p:claimsValidator="#{getObject('DefaultJWTClaimsValidator')}"
         p:forcePKCE="%{sp.oidc.forcePKCE:false}"
-        p:allowPKCEPlain="%{sp.oidc.allowPKCEPlain:false}"      
+        p:allowPKCEPlain="%{sp.oidc.allowPKCEPlain:false}"
         p:tokenEndpointAuthMethod="%{sp.oidc.authenticationMethod:client_secret_basic}"
         p:useTargetedEndpointAsJWTAudience="%{sp.oauth2.jwtAuth.targetedEndpointAsJWTAudience:true}"
         p:clientCredential="#{%{sp.oidc.discoveryRequired:false} == true ? {null} : getObject('shibboleth.oidc.DefaultCredential')}"
@@ -92,7 +92,7 @@
    <bean id="OIDC.SSO" parent="AbstractOIDCSSOProfile" lazy-init="true"
         class="net.shibboleth.oidc.profile.config.impl.DefaultOIDCAuthorizationConfiguration"        
         p:encodedAttributes="%{sp.oidc.encodedAttributes:%{sp.oidc.embeddedAttributes:}}" 
-        p:resolveAttributes="%{sp.oidc.resolveAttributes:true}"       
+        p:resolveAttributes="%{sp.oidc.resolveAttributes:false}"       
         p:httpRequestMethod="%{sp.oidc.httpRequestMethod:GET}"       
         p:retrieveUserInfoEndpointClaims="%{sp.oidc.userinfo.enabled:true}"        
         p:redirectUriOverride="%{sp.oidc.redirectURI:#{null}}"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.