[java-idp-plugin-oidc-op-oidfed] 01/03: Wire requireRemoteTrustMarkValidation to automatic/explicit registration

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-oidc-op-oidfed.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-oidc-op-oidfed/commit/21a3b1eb0c5b999b056fb65e5cc9cf8e9c85ff53

commit 21a3b1eb0c5b999b056fb65e5cc9cf8e9c85ff53
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Sun Oct 11 17:10:20 2026 +0300

    Wire requireRemoteTrustMarkValidation to automatic/explicit registration
    
    - idp.oidfed.op.automaticRegistration.requireRemoteTrustMarkValidation
    - idp.oidfed.op.explicitRegistration.requireRemoteTrustMarkValidation
---
 .../META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml    | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 042d770..3331822 100644
--- a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -22,6 +22,7 @@
         p:mandatoryTrustMarks="%{idp.oidfed.op.automaticRegistration.mandatoryTrustMarks:}"
         p:maximumTrustMarkLifetime="%{idp.oidfed.op.automaticRegistration.maximumTrustMarkLifetime:P365D}"
         p:remoteTrustMarkValidation="%{idp.oidfed.op.automaticRegistration.remoteTrustMarkValidation:true}"
+        p:requireRemoteTrustMarkValidation="%{idp.oidfed.op.automaticRegistration.requireRemoteTrustMarkValidation:true}"
         p:defaultClaimsSetDecorationType="%{idp.oidfed.op.automaticRegistration.defaultClaimsSetDecorationType:token}"
         p:providedChainClaimsSetDecorationType="%{idp.oidfed.op.automaticRegistration.providedClaimsSetDecorationType:store}">
         <property name="localMetadataPolicyLookupStrategy">
@@ -46,6 +47,7 @@
         p:mandatoryTrustMarks="%{idp.oidfed.op.explicitRegistration.mandatoryTrustMarks:}"
         p:maximumTrustMarkLifetime="%{idp.oidfed.op.explicitRegistration.maximumTrustMarkLifetime:P365D}"
         p:remoteTrustMarkValidation="%{idp.oidfed.op.explicitRegistration.remoteTrustMarkValidation:true}"
+        p:requireRemoteTrustMarkValidation="%{idp.oidfed.op.explicitRegistration.requireRemoteTrustMarkValidation:true}"
         p:tokenEndpointAuthMethods="%{idp.oidfed.op.explicitRegistration.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"/>
 
 </beans>

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.