[java-idp-plugin-vci] branch main updated (9c305d5 -> cbd4a65)
Codeberg
noreply at shibboleth.net
Wed Nov 4 12:16:36 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a change to branch main
in repository java-idp-plugin-vci.
from 9c305d5 Initial version file
add 50ea06c Remove OP resource prefix from PAR form parameters in PAR strategy, a workaround for OP shortcoming
add c5a38c6 Bind refresh tokens to client instance (draft-ietf-oauth-attestation-based-client-auth-12 section 10.3)
add 7e5f791 Adopt OP token flow features, Refresh tokens etc.Credential Issuer Identifier as access token audience
add b9b1811 Requirement for OP module idp.oidc.OP.7. Use own update URL
add f3a80fc Update README for refresh tokens, audience changes and new attribute resolution at the token endpoint
add 8a44e6b Update tarball
add ca84919 Reader instucted to move forward is revocation is no interest
add cbd4a65 Token endpoint resolution example
No new revisions were added by this update.
Summary of changes:
README.md | 661 +++++++++------
docs/example/step-1/metadata/oidc-client.json | 3 +-
docs/example/step-2/metadata/oidc-client.json | 3 +-
docs/example/step-3/metadata/oidc-client.json | 6 +-
docs/example/step-4/metadata/oidc-client.json | 6 +-
docs/example/step-5/conf/relying-party.xml | 1 +
docs/example/step-5/metadata/oidc-client.json | 4 +-
...eth-idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz | Bin 451231 -> 471934 bytes
...idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz.asc | 22 +-
.../impl/OpenIDVCITokenRequestDecoder.java | 81 +-
...ava => PotentialCredentialsLookupFunction.java} | 30 +-
.../messaging/impl/OpenIDVCITokenRequest.java | 191 ++++-
.../impl/DefaultOpenIDVCITokenConfiguration.java | 90 +-
.../ClientInstanceKeyThumbprintLookupFunction.java | 88 ++
.../impl/FormOutboundTokenResponseMessage.java | 83 +-
.../impl/InitializePotentialCredentials.java | 65 ++
.../SetCredentialsAudienceToResponseContext.java | 70 +-
...wrapGrant.java => UnwrapPreAuthorizedCode.java} | 88 +-
.../ClientInstanceKeyRevocationCondition.java | 74 ++
.../logic/OpenIDVCITokenManipulationStrategy.java | 26 +-
...edAuthorizationDPoPJktManipulationStrategy.java | 81 +-
.../META-INF/net.shibboleth.idp/postconfig.xml | 7 +-
.../idp/flows/did/document/document-beans.xml | 4 +-
.../authorization-server-beans.xml | 4 +-
.../oauth/jwt-vc-issuer/jwt-vc-issuer-beans.xml | 4 +-
.../status-list/assignments/assignments-beans.xml | 6 +-
.../flows/oauth/status-list/list/list-beans.xml | 4 +-
.../oauth/status-list/revoke/revoke-beans.xml | 6 +-
.../openid/vci/abstract-api/abstract-api-flow.xml | 6 +-
.../credential-offer/credential-offer-beans.xml | 6 +-
.../openid/vci/credentials/credentials-beans.xml | 6 +-
.../vci/issuer-metadata/issuer-metadata-beans.xml | 4 +-
.../idp/flows/openid/vci/nonce/nonce-beans.xml | 4 +-
.../idp/flows/openid/vci/token/token-beans.xml | 917 +++------------------
.../idp/flows/openid/vci/token/token-flow.xml | 95 ++-
.../idp/service/relying-party/postconfig.xml | 35 +-
.../plugin/openidvci/conf/openid-vci.properties | 4 +
.../shibboleth/plugin/openidvci/plugin.properties | 6 +-
.../static/oauth-authorization-server.json | 1 +
.../impl/OpenIDVCITokenRequestDecoderTest.java | 28 +-
.../messaging/impl/OpenIDVCITokenRequestTest.java | 63 +-
.../DefaultOpenIDVCITokenConfigurationTest.java | 18 +-
...entInstanceKeyThumbprintLookupFunctionTest.java | 76 ++
...etCredentialsAudienceToResponseContextTest.java | 52 +-
.../ClientInstanceKeyRevocationConditionTest.java | 65 ++
.../OpenIDVCITokenManipulationStrategyTest.java | 75 ++
...thorizationDPoPJktManipulationStrategyTest.java | 91 ++
47 files changed, 1846 insertions(+), 1414 deletions(-)
copy openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/messaging/context/navigate/{RequestCredentialIdentifierLookupFunction.java => PotentialCredentialsLookupFunction.java} (59%)
create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/context/navigate/ClientInstanceKeyThumbprintLookupFunction.java
create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/InitializePotentialCredentials.java
rename openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/{UnwrapGrant.java => UnwrapPreAuthorizedCode.java} (70%)
create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/logic/ClientInstanceKeyRevocationCondition.java
create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/context/navigate/ClientInstanceKeyThumbprintLookupFunctionTest.java
create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/ClientInstanceKeyRevocationConditionTest.java
create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/OpenIDVCITokenManipulationStrategyTest.java
create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/logic/PushedAuthorizationDPoPJktManipulationStrategyTest.java
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list