[java-idp-plugin-vci] branch main updated: Relying party conf to allow oauth2 authz requests
Codeberg
noreply at shibboleth.net
Tue Oct 6 14:00:31 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.
View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/f445d32e04bb0cfad9394c88935bada67f49d27e
The following commit(s) were added to refs/heads/main by this push:
new f445d32 Relying party conf to allow oauth2 authz requests
f445d32 is described below
commit f445d32e04bb0cfad9394c88935bada67f49d27e
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Tue Oct 6 17:00:02 2026 +0300
Relying party conf to allow oauth2 authz requests
---
docs/example/step-2/conf/relying-party.xml | 2 ++
docs/example/step-3/conf/relying-party.xml | 4 ++++
docs/example/step-4/conf/relying-party.xml | 4 ++++
docs/example/step-5/conf/relying-party.xml | 6 ++++++
4 files changed, 16 insertions(+)
diff --git a/docs/example/step-2/conf/relying-party.xml b/docs/example/step-2/conf/relying-party.xml
index df0e9ac..7c050b9 100644
--- a/docs/example/step-2/conf/relying-party.xml
+++ b/docs/example/step-2/conf/relying-party.xml
@@ -72,6 +72,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -80,6 +81,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
diff --git a/docs/example/step-3/conf/relying-party.xml b/docs/example/step-3/conf/relying-party.xml
index bd86516..1b6a943 100644
--- a/docs/example/step-3/conf/relying-party.xml
+++ b/docs/example/step-3/conf/relying-party.xml
@@ -74,6 +74,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -82,6 +83,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
@@ -92,6 +94,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -100,6 +103,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
diff --git a/docs/example/step-4/conf/relying-party.xml b/docs/example/step-4/conf/relying-party.xml
index 4b430a1..edd1915 100644
--- a/docs/example/step-4/conf/relying-party.xml
+++ b/docs/example/step-4/conf/relying-party.xml
@@ -76,6 +76,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -84,6 +85,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
@@ -94,6 +96,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -102,6 +105,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
diff --git a/docs/example/step-5/conf/relying-party.xml b/docs/example/step-5/conf/relying-party.xml
index 3719429..f66bdb3 100644
--- a/docs/example/step-5/conf/relying-party.xml
+++ b/docs/example/step-5/conf/relying-party.xml
@@ -76,6 +76,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -84,6 +85,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
@@ -94,6 +96,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true"
p:requirePushedAuthorizationRequest="true" />
@@ -102,6 +105,7 @@
p:accessTokenClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'none'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
@@ -112,6 +116,7 @@
<property name="profileConfigurations">
<list>
<bean parent="OIDC.SSO"
+ p:requireAuthenticationRequest="false"
p:authorizationCodeClaimsSetManipulationStrategy-ref="openidvci.TokenManipulationStrategy"
p:forcePKCE="true" p:requirePushedAuthorizationRequest="true"
p:includeIssuerInResponse="true" p:authorizeCodeLifetime="PT1M" />
@@ -121,6 +126,7 @@
p:requireDpopProof="true" />
<bean parent="OpenID.VCI.Credentials" />
<bean parent="OAUTH2.PAR" p:tokenEndpointAuthMethods="#{{'attest_jwt_client_auth'}}"
+ p:requireAuthenticationRequest="false"
p:requestUriClaimsSetManipulationStrategy-ref="openidvci.PushedAuthorizationDPoPJktManipulationStrategy" />
</list>
</property>
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list