[java-idp-plugin-vci] branch main updated: Own property for the c_nonce lifetime

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/23d2e1ddd7b2e7dce0d4f8f0573a4d90abacbd32

The following commit(s) were added to refs/heads/main by this push:
     new 23d2e1d  Own property for the c_nonce lifetime
23d2e1d is described below

commit 23d2e1ddd7b2e7dce0d4f8f0573a4d90abacbd32
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Thu Oct 22 17:22:37 2026 +0300

    Own property for the c_nonce lifetime
---
 README.md                                                          | 1 +
 .../net/shibboleth/idp/service/relying-party/postconfig.xml        | 7 ++++---
 .../geant/shibboleth/plugin/openidvci/conf/openid-vci.properties   | 3 +++
 3 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index 13c56e0..509e001 100644
--- a/README.md
+++ b/README.md
@@ -4695,6 +4695,7 @@ The file comes with the plugin and is loaded automatically.
 | `openidvci.StorageService` | Bean ID | **shibboleth.StorageService** | Storage of Credential Offers. Server side storage. |
 | `openidvci.preAuthorizedCode.defaultLifetime` | Duration | `PT10M` | Lifetime of pre-authorized codes. |
 | `openidvci.preAuthorizedCode.defaultLength` | Integer | `0` | `0` self-contained, `10` or more stored. |
+| `openidvci.nonce.lifetime` | Duration | `PT5M` | Lifetime of the `c_nonce` of the Nonce endpoint. |
 
 #### Credential Configurations
 
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index caf371b..f609604 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -96,8 +96,9 @@
     <bean id="OAuth.StatusList.Assignments" parent="AbstractVCIProfile" lazy-init="true"
         class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.config.impl.DefaultStatusListAssignmentsConfiguration" />
 
-    <!-- The generator does not tie client id to nonce to accomodate unprotected Nonce endpoint. -->    
+    <!-- The generator does not tie client id to nonce to accommodate unprotected Nonce endpoint. -->
     <bean id="openidvci.DefaultOpenIDVCINonceGenerator" parent="DefaultOAuth2DPoPNonceGenerator" lazy-init="true"
+        p:nonceLifetime="%{openidvci.nonce.lifetime:PT5M}"
         p:relyingPartyIdLookupStrategy-ref="openidvci.RelyingPartyForNonce">
     </bean>
 
@@ -105,7 +106,7 @@
     <bean id="openidvci.RelyingPartyForNonce" parent="shibboleth.Functions.Constant">
         <constructor-arg>
             <bean class="java.lang.String" c:_0="mockRelyingParty" />
-         </constructor-arg>
+        </constructor-arg>
     </bean>
 
     <bean id="openidvci.DefaultProofBodyClaimsValidator"
@@ -200,7 +201,7 @@
     </bean>
 
     <bean id="openidvci.ProofNonceGeneratorLookupFunction"
-        class="org.geant.shibboleth.plugin.openidvci.profile.config.navigate.ProofNonceGeneratorLookupFunction" />    
+        class="org.geant.shibboleth.plugin.openidvci.profile.config.navigate.ProofNonceGeneratorLookupFunction" />
 
     <util:list id="openidvci.ProofBodyClaimsValidator" value-type="net.shibboleth.oidc.jwt.claims.ClaimsValidator">
         <ref bean="openidvci.ProofNonceValidator" />
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
index bf245f7..f9448a4 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
@@ -22,6 +22,9 @@ openidvci.issuer =
 # Size of pre-authorized codes (0 = untruncated)
 #openidvci.preAuthorizedCode.defaultLength = 0
 
+# Lifetime of the c_nonce of the Nonce endpoint
+#openidvci.nonce.lifetime = PT5M
+
 # The location for the JSON file of Credential Configurations, published in Credential Issuer
 # metadata and used as the instruction on how a credential is formed. Every flow reads them
 # from here, through one resolver, so the file is read when it changes and not once per request.

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.