[java-idp-plugin-vci] branch main updated (9c305d5 -> cbd4a65)

Codeberg noreply at shibboleth.net
Wed Nov 4 12:16:36 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a change to branch main
in repository java-idp-plugin-vci.

    from 9c305d5  Initial version file
     add 50ea06c  Remove OP resource prefix from PAR form parameters in PAR strategy, a workaround for OP shortcoming
     add c5a38c6  Bind refresh tokens to client instance (draft-ietf-oauth-attestation-based-client-auth-12 section 10.3)
     add 7e5f791  Adopt OP token flow features, Refresh tokens etc.Credential Issuer Identifier as access token audience
     add b9b1811  Requirement for OP module idp.oidc.OP.7. Use own update URL
     add f3a80fc  Update README for refresh tokens, audience changes and new attribute resolution at the token endpoint
     add 8a44e6b  Update tarball
     add ca84919  Reader instucted to move forward is revocation is no interest
     add cbd4a65  Token endpoint resolution example

No new revisions were added by this update.

Summary of changes:
 README.md                                          | 661 +++++++++------
 docs/example/step-1/metadata/oidc-client.json      |   3 +-
 docs/example/step-2/metadata/oidc-client.json      |   3 +-
 docs/example/step-3/metadata/oidc-client.json      |   6 +-
 docs/example/step-4/metadata/oidc-client.json      |   6 +-
 docs/example/step-5/conf/relying-party.xml         |   1 +
 docs/example/step-5/metadata/oidc-client.json      |   4 +-
 ...eth-idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz | Bin 451231 -> 471934 bytes
 ...idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz.asc |  22 +-
 .../impl/OpenIDVCITokenRequestDecoder.java         |  81 +-
 ...ava => PotentialCredentialsLookupFunction.java} |  30 +-
 .../messaging/impl/OpenIDVCITokenRequest.java      | 191 ++++-
 .../impl/DefaultOpenIDVCITokenConfiguration.java   |  90 +-
 .../ClientInstanceKeyThumbprintLookupFunction.java |  88 ++
 .../impl/FormOutboundTokenResponseMessage.java     |  83 +-
 .../impl/InitializePotentialCredentials.java       |  65 ++
 .../SetCredentialsAudienceToResponseContext.java   |  70 +-
 ...wrapGrant.java => UnwrapPreAuthorizedCode.java} |  88 +-
 .../ClientInstanceKeyRevocationCondition.java      |  74 ++
 .../logic/OpenIDVCITokenManipulationStrategy.java  |  26 +-
 ...edAuthorizationDPoPJktManipulationStrategy.java |  81 +-
 .../META-INF/net.shibboleth.idp/postconfig.xml     |   7 +-
 .../idp/flows/did/document/document-beans.xml      |   4 +-
 .../authorization-server-beans.xml                 |   4 +-
 .../oauth/jwt-vc-issuer/jwt-vc-issuer-beans.xml    |   4 +-
 .../status-list/assignments/assignments-beans.xml  |   6 +-
 .../flows/oauth/status-list/list/list-beans.xml    |   4 +-
 .../oauth/status-list/revoke/revoke-beans.xml      |   6 +-
 .../openid/vci/abstract-api/abstract-api-flow.xml  |   6 +-
 .../credential-offer/credential-offer-beans.xml    |   6 +-
 .../openid/vci/credentials/credentials-beans.xml   |   6 +-
 .../vci/issuer-metadata/issuer-metadata-beans.xml  |   4 +-
 .../idp/flows/openid/vci/nonce/nonce-beans.xml     |   4 +-
 .../idp/flows/openid/vci/token/token-beans.xml     | 917 +++------------------
 .../idp/flows/openid/vci/token/token-flow.xml      |  95 ++-
 .../idp/service/relying-party/postconfig.xml       |  35 +-
 .../plugin/openidvci/conf/openid-vci.properties    |   4 +
 .../shibboleth/plugin/openidvci/plugin.properties  |   6 +-
 .../static/oauth-authorization-server.json         |   1 +
 .../impl/OpenIDVCITokenRequestDecoderTest.java     |  28 +-
 .../messaging/impl/OpenIDVCITokenRequestTest.java  |  63 +-
 .../DefaultOpenIDVCITokenConfigurationTest.java    |  18 +-
 ...entInstanceKeyThumbprintLookupFunctionTest.java |  76 ++
 ...etCredentialsAudienceToResponseContextTest.java |  52 +-
 .../ClientInstanceKeyRevocationConditionTest.java  |  65 ++
 .../OpenIDVCITokenManipulationStrategyTest.java    |  75 ++
 ...thorizationDPoPJktManipulationStrategyTest.java |  91 ++
 47 files changed, 1846 insertions(+), 1414 deletions(-)
 copy openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/messaging/context/navigate/{RequestCredentialIdentifierLookupFunction.java => PotentialCredentialsLookupFunction.java} (59%)
 create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/context/navigate/ClientInstanceKeyThumbprintLookupFunction.java
 create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/InitializePotentialCredentials.java
 rename openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/{UnwrapGrant.java => UnwrapPreAuthorizedCode.java} (70%)
 create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/logic/ClientInstanceKeyRevocationCondition.java
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/context/navigate/ClientInstanceKeyThumbprintLookupFunctionTest.java
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/ClientInstanceKeyRevocationConditionTest.java
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/OpenIDVCITokenManipulationStrategyTest.java
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/PushedAuthorizationDPoPJktManipulationStrategyTest.java

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list