[java-plugin-shibd-oidc] branch dev/JSHIBDOIDC-31-cred-resolver updated: Update default client secret property names and add to properties file

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/JSHIBDOIDC-31-cred-resolver
in repository java-plugin-shibd-oidc.

View the commit online:
https://codeberg.org/Shibboleth/java-plugin-shibd-oidc/commit/f9fbb833c8e6762493ffe00cc548d76c4331c33e

The following commit(s) were added to refs/heads/dev/JSHIBDOIDC-31-cred-resolver by this push:
     new f9fbb83  Update default client secret property names and add to properties file
f9fbb83 is described below

commit f9fbb833c8e6762493ffe00cc548d76c4331c33e
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Nov 5 11:58:43 2026 +0000

    Update default client secret property names and add to properties file
---
 .../META-INF/net/shibboleth/sp/service/credentials/postconfig.xml     | 4 ++--
 .../main/resources/net/shibboleth/idp/module/conf/sp/oidc.properties  | 4 ++++
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/credentials/postconfig.xml b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/credentials/postconfig.xml
index f4aa1f4..858cbcd 100644
--- a/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/credentials/postconfig.xml
+++ b/sp-oidc-conf-impl/src/main/resources/META-INF/net/shibboleth/sp/service/credentials/postconfig.xml
@@ -107,8 +107,8 @@
         p:clientSecretTemplateString="${transformedRelyingPartyID}">
         <property name="storageService">
             <bean parent="shibboleth.ResourceBackedStorageService"
-                p:resource="%{sp.oidc.service.clientSecret.resource:%{idp.home}/credentials/sp/client-secrets.txt}"
-                p:delimiter="%{sp.oidc.service.clientSecret.delimiter::}"/>
+                p:resource="%{sp.oidc.clientSecret.resource:%{idp.home}/credentials/sp/client-secrets.txt}"
+                p:delimiter="%{sp.oidc.clientSecret.delimiter::}"/>
         </property>
     </bean>
 
diff --git a/sp-oidc-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/oidc.properties b/sp-oidc-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/oidc.properties
index 62cbae2..1a5e60a 100644
--- a/sp-oidc-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/oidc.properties
+++ b/sp-oidc-conf-impl/src/main/resources/net/shibboleth/idp/module/conf/sp/oidc.properties
@@ -20,6 +20,10 @@
 #sp.oidc.authenticationMethod = client_secret_basic
 #sp.oidc.authenticationMethod.jwt.expiryOffset = PT30S
 
+# Default client secret resolver configuration
+#sp.oidc.clientSecret.resource = %{idp.home}/credentials/sp/client-secrets.txt
+#sp.oidc.clientSecret.delimiter = :
+
 # Enable PKCE for the authorization code flow
 #sp.oidc.forcePKCE = false
 #sp.oidc.allowPKCEPlain = false

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.