[java-idp-plugin-vci] 01/02: Property naming aligned
Codeberg
noreply at shibboleth.net
Mon Sep 7 06:26:47 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch dev/AlignProperties
in repository java-idp-plugin-vci.
View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/4817759eeb35de15451f3562e1922ee3f019e4b2
commit 4817759eeb35de15451f3562e1922ee3f019e4b2
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Mon Sep 7 08:30:42 2026 +0300
Property naming aligned
---
.../storage/StatusListIndexAllocator.java | 4 +-
.../META-INF/net.shibboleth.idp/postconfig.xml | 6 +-
.../oauth/status-list/assign/assign-beans.xml | 8 +-
.../status-list/assignments/assignments-beans.xml | 6 +-
.../flows/oauth/status-list/list/list-beans.xml | 6 +-
.../oauth/status-list/revoke/revoke-beans.xml | 4 +-
.../flows/openid/vci/abstract/abstract-beans.xml | 2 +-
.../credential-offer/credential-offer-beans.xml | 2 +
.../openid/vci/credentials/credentials-beans.xml | 2 +
.../vci/issuer-metadata/issuer-metadata-beans.xml | 2 +
.../idp/flows/openid/vci/nonce/nonce-beans.xml | 2 +
.../idp/flows/openid/vci/token/token-beans.xml | 2 +
.../idp/service/relying-party/postconfig.xml | 4 +-
.../openidvci/conf/openid-vci-credentials.xml | 6 +-
.../plugin/openidvci/conf/openid-vci.properties | 85 ++++++++++++++++------
15 files changed, 97 insertions(+), 44 deletions(-)
diff --git a/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/statuslist/storage/StatusListIndexAllocator.java b/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/statuslist/storage/StatusListIndexAllocator.java
index bde484b..2c13e44 100644
--- a/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/statuslist/storage/StatusListIndexAllocator.java
+++ b/openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/statuslist/storage/StatusListIndexAllocator.java
@@ -179,12 +179,12 @@ public class StatusListIndexAllocator extends AbstractIdentifiableInitializableC
}
if (permutationKey == null || permutationKey.isEmpty()) {
throw new ComponentInitializationException("Permutation key cannot be null or empty; set "
- + "oauth.statuslist.indexPermutationKey to a stable secret value");
+ + "openidvci.status-list.index.permutationKey to a stable secret value");
}
if (PLACEHOLDER_KEY.equals(permutationKey)) {
log.warn("Status list indices are permuted with the key shipped in the plugin's properties. "
+ "Anyone can recover the issuance order of issued credentials until "
- + "oauth.statuslist.indexPermutationKey is changed, and changing it later reissues slots.");
+ + "openidvci.status-list.index.permutationKey is changed, and changing it later reissues slots.");
}
permutation = new FeistelIndexPermutation(INDEX_BITS, permutationKey.getBytes(StandardCharsets.UTF_8));
}
diff --git a/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 00f3c22..6fa0ac5 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -89,11 +89,11 @@
class="org.geant.shibboleth.plugin.openidvci.credential.impl.FilesystemCredentialConfigurationsResolver"
depends-on="shibboleth.LoggingService"
p:id="openidvci.CredentialConfigurationsResolver"
- p:minRefreshDelay="%{openidvci.credentials.minRefreshDelay:PT5M}"
- p:maxRefreshDelay="%{openidvci.credentials.maxRefreshDelay:PT4H}"
+ p:minRefreshDelay="%{openidvci.credentialConfigurations.minRefreshDelay:PT5M}"
+ p:maxRefreshDelay="%{openidvci.credentialConfigurations.maxRefreshDelay:PT4H}"
c:credentials-ref="openidvci.CredentialsResource" />
<bean id="openidvci.CredentialsResource" class="org.springframework.core.io.FileSystemResource" lazy-init="true"
- c:path="%{openidvci.credentials:%{idp.home}/metadata/verifiable-credentials.json}" />
+ c:path="%{openidvci.credentialConfigurations.resource:%{idp.home}/metadata/verifiable-credentials.json}" />
</beans>
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assign/assign-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assign/assign-beans.xml
index efe384e..7481dfe 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assign/assign-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assign/assign-beans.xml
@@ -15,8 +15,8 @@
class="org.geant.shibboleth.plugin.openidvci.statuslist.storage.StatusListIndexAllocator"
depends-on="shibboleth.LoggingService"
p:id="oauth.StatusListIndexAllocator"
- p:storage-ref="#{'%{oauth.StatusListIndexAllocator:shibboleth.StorageService}'.trim()}"
- p:permutationKey="%{oauth.statuslist.indexPermutationKey:}" />
+ p:storage-ref="#{'%{openidvci.status-list.index.StorageService:shibboleth.StorageService}'.trim()}"
+ p:permutationKey="%{openidvci.status-list.index.permutationKey:}" />
<bean id="AllocateIndex"
class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.impl.AllocateIndex"
@@ -35,8 +35,8 @@
class="org.geant.shibboleth.plugin.openidvci.statuslist.storage.StatusListAssignmentStore"
depends-on="shibboleth.LoggingService"
p:id="oauth.StatusListAssignmentStore"
- p:retention="%{oauth.statuslist.assignmentRetention:P7D}"
- p:storage-ref="#{'%{oauth.StatusListAssignmentStore:shibboleth.StorageService}'.trim()}" />
+ p:retention="%{openidvci.status-list.assignment.retention:P7D}"
+ p:storage-ref="#{'%{openidvci.status-list.assignment.StorageService:shibboleth.StorageService}'.trim()}" />
<bean id="AssignIndex"
class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.impl.AssignIndex"
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assignments/assignments-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assignments/assignments-beans.xml
index bde4ace..43b58e8 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assignments/assignments-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/assignments/assignments-beans.xml
@@ -13,6 +13,8 @@
<bean id="shibboleth.openidvci.profileId" class="java.lang.String"
c:_0="http://geant.org/ns/profiles/oauth/status-list/assignments"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.status-list.assignments:OAuth.StatusList.Assignments}"/>
<bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
<constructor-arg>
@@ -32,8 +34,8 @@
class="org.geant.shibboleth.plugin.openidvci.statuslist.storage.StatusListAssignmentStore"
depends-on="shibboleth.LoggingService"
p:id="oauth.StatusListAssignmentStore"
- p:retention="%{oauth.statuslist.assignmentRetention:P7D}"
- p:storage-ref="#{'%{oauth.StatusListAssignmentStore:shibboleth.StorageService}'.trim()}" />
+ p:retention="%{openidvci.status-list.assignment.retention:P7D}"
+ p:storage-ref="#{'%{openidvci.status-list.assignment.StorageService:shibboleth.StorageService}'.trim()}" />
<bean id="FormOutboundMessage"
class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.impl.FormOutboundStatusListAssignmentsResponseMessage"
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/list/list-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/list/list-beans.xml
index 655c8e6..5e5f622 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/list/list-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/list/list-beans.xml
@@ -12,6 +12,8 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.openidvci.profileId" class="java.lang.String" c:_0="http://geant.org/ns/profiles/oauth/status-list"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.status-list.list:OAuth.StatusList}"/>
<bean id="InitializeUnverifiedRelyingPartyContext"
class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext" scope="prototype" />
@@ -42,13 +44,13 @@
class="org.geant.shibboleth.plugin.openidvci.statuslist.storage.StatusListStore"
depends-on="shibboleth.LoggingService"
p:id="oauth.StatusListStore"
- p:storage-ref="#{'%{oauth.StatusListStore:shibboleth.StorageService}'.trim()}" />
+ p:storage-ref="#{'%{openidvci.status-list.StorageService:shibboleth.StorageService}'.trim()}" />
<bean id="FormStatusListToken"
class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.impl.FormStatusListToken"
scope="prototype"
p:statusListStore-ref="oauth.StatusListStore"
- p:ttl="%{oauth.statuslist.ttl:PT1H}"
+ p:ttl="%{openidvci.status-list.token.defaultLifetime:PT1H}"
p:issuerLookupStrategy-ref="openidvci.IssuerLookupStrategy"
p:httpServletRequestSupplier-ref="shibboleth.HttpServletRequestSupplier" />
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/revoke/revoke-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/revoke/revoke-beans.xml
index eb4daf0..a9ab008 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/revoke/revoke-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oauth/status-list/revoke/revoke-beans.xml
@@ -13,6 +13,8 @@
<bean id="shibboleth.openidvci.profileId" class="java.lang.String"
c:_0="http://geant.org/ns/profiles/oauth/status-list/revoke"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.status-list.revoke:OAuth.StatusList.Revoke}"/>
<bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
<constructor-arg>
@@ -32,7 +34,7 @@
class="org.geant.shibboleth.plugin.openidvci.statuslist.storage.StatusListStore"
depends-on="shibboleth.LoggingService"
p:id="oauth.StatusListStore"
- p:storage-ref="#{'%{oauth.StatusListStore:shibboleth.StorageService}'.trim()}" />
+ p:storage-ref="#{'%{openidvci.status-list.StorageService:shibboleth.StorageService}'.trim()}" />
<bean id="RevokeStatusListIndex"
class="org.geant.shibboleth.plugin.openidvci.statuslist.profile.impl.RevokeStatusListIndex"
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract/abstract-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract/abstract-beans.xml
index db210c7..e948ae7 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract/abstract-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/abstract/abstract-beans.xml
@@ -10,7 +10,7 @@
<import resource="classpath*:/META-INF/net/shibboleth/idp/flows/oidc/abstract/oidc-abstract-beans.xml"/>
<bean id="InitializeProfileRequestContext" class="net.shibboleth.idp.profile.impl.InitializeProfileRequestContext"
- scope="prototype" p:profileId-ref="shibboleth.openidvci.profileId" p:loggingId="%{idp.service.logging.saml2sso:SSO}"
+ scope="prototype" p:profileId-ref="shibboleth.openidvci.profileId" p:loggingId-ref="shibboleth.openidvci.loggingId"
p:browserProfile-ref="shibboleth.openidvci.browserProfile"/>
<bean id="openidvci.CredentialOfferCache" class="org.geant.shibboleth.plugin.openidvci.storage.CredentialOfferCache"
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credential-offer/credential-offer-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credential-offer/credential-offer-beans.xml
index f6af2fe..e34d433 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credential-offer/credential-offer-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credential-offer/credential-offer-beans.xml
@@ -12,6 +12,8 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.openidvci.profileId" class="java.lang.String" c:_0="http://geant.org/ns/profiles/openid/vci/credential-offer"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.credential-offer:OpenID.VCI.CredentialOffer}"/>
<bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
<constructor-arg>
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-beans.xml
index 6ede675..6e2aa0a 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/credentials/credentials-beans.xml
@@ -12,6 +12,8 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.openidvci.profileId" class="java.lang.String" c:_0="http://geant.org/ns/profiles/openid/vci/credentials"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.credentials:OpenID.VCI.Credentials}"/>
<bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
<constructor-arg>
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/issuer-metadata/issuer-metadata-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/issuer-metadata/issuer-metadata-beans.xml
index d238566..a6961be 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/issuer-metadata/issuer-metadata-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/issuer-metadata/issuer-metadata-beans.xml
@@ -13,6 +13,8 @@
<bean id="shibboleth.openidvci.profileId" class="java.lang.String"
c:_0="http://geant.org/ns/profiles/openid/vci/issuer-metadata"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.issuer-metadata:OpenID.VCI.IssuerMetadata}"/>
<bean id="InitializeUnverifiedRelyingPartyContext"
class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext" scope="prototype" />
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/nonce/nonce-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/nonce/nonce-beans.xml
index 57870b7..9fd0b4a 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/nonce/nonce-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/nonce/nonce-beans.xml
@@ -12,6 +12,8 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.openidvci.profileId" class="java.lang.String" c:_0="http://geant.org/ns/profiles/openid/vci/nonce"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.nonce:OpenID.VCI.Nonce}"/>
<bean id="InitializeUnverifiedRelyingPartyContext"
class="net.shibboleth.idp.plugin.oidc.op.profile.impl.InitializeUnverifiedRelyingPartyContext" scope="prototype" />
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
index 973c63d..feae2c2 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-beans.xml
@@ -12,6 +12,8 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.openidvci.profileId" class="java.lang.String" c:_0="http://geant.org/ns/profiles/openid/vci/token"/>
+ <bean id="shibboleth.openidvci.loggingId" class="java.lang.String"
+ c:_0="%{openidvci.logging.token:OpenID.VCI.Token}"/>
<bean id="DecodeMessage" class="org.opensaml.profile.action.impl.DecodeMessage" scope="prototype">
<constructor-arg>
diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
index 32e4956..2238979 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/service/relying-party/postconfig.xml
@@ -18,8 +18,8 @@
<bean id="AbstractVCIProfile" abstract="true"
p:issuer="#{getObject('shibboleth.oidc.issuer')}"
- p:preauthorizedCodeLifetime="%{openidvci.preauthorizedCode:PT10M}"
- p:preauthorizedCodeLength="%{openidvci.preauthorizedCode.defaultLength:0}"
+ p:preauthorizedCodeLifetime="%{openidvci.preAuthorizedCode.defaultLifetime:PT10M}"
+ p:preauthorizedCodeLength="%{openidvci.preAuthorizedCode.defaultLength:0}"
p:tokenEndpointAuthMethods="%{idp.oidc.tokenEndpointAuthMethods:client_secret_basic,client_secret_post,client_secret_jwt,private_key_jwt}"
p:forcePKCE="%{idp.oidc.forcePKCE:false}"
p:allowPKCEPlain="%{idp.oidc.allowPKCEPlain:false}"
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci-credentials.xml b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci-credentials.xml
index 27dc5cd..0ecba83 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci-credentials.xml
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci-credentials.xml
@@ -16,7 +16,7 @@
-->
<!--
<bean id="openidvci.DefaultESSigningCredential" parent="shibboleth.JWKCredential"
- p:resource="%{idp.signing.openidvci.es.key}" />
+ p:resource="%{openidvci.signing.es.key}" />
-->
<!--
@@ -35,7 +35,7 @@
<!--
<bean id="oauth.statuslist.DefaultESSigningCredential" parent="shibboleth.JWKCredential"
- p:resource="%{idp.signing.oauth.statuslist.es.key}" />
+ p:resource="%{openidvci.signing.status-list.es.key}" />
<util:list id="oauth.statuslist.SigningCredentials">
<ref bean="oauth.statuslist.DefaultESSigningCredential" />
@@ -48,7 +48,7 @@
-->
<!--
<bean id="openidvci.issuerMetadata.DefaultESSigningCredential" parent="shibboleth.JWKCredential"
- p:resource="%{idp.signing.openidvci.issuerMetadata.es.key}" />
+ p:resource="%{openidvci.signing.issuerMetadata.es.key}" />
<util:list id="openidvci.issuerMetadata.SigningCredentials">
<ref bean="openidvci.issuerMetadata.DefaultESSigningCredential" />
diff --git a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
index baf5c2b..3bc3c82 100644
--- a/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
+++ b/openid-vci-impl/src/main/resources/org/geant/shibboleth/plugin/openidvci/conf/openid-vci.properties
@@ -1,44 +1,81 @@
-oauth.statuslist.indexPermutationKey=change_this_to_secret
-oauth.statuslist.ttl=PT1H
-oauth.statuslist.assignmentRetention=P7D
-#Openid Issuer in credentials. Default to did:jwk
-openidvci.issuer=
+# Set the Credential Issuer value used in credentials
+# Leave empty value for the default of did:jwk
+openidvci.issuer =
-# Signing key of issued Verifiable Credentials. Used only if you enable the credential of the
-# same name in conf/openid-vci-credentials.xml. Until that, Credentials are signed with the
-# OP's own signing credentials. Must be EC key.
-idp.signing.openidvci.es.key = %{idp.home}/credentials/openid-vci-signing-es.jwk
+# Regular expression matching OpenID VCI login flows to enable.
+# For most deployments, the default is sufficient to accomodate a variety of methods
+#openidvci.authn.flows = OAuth2Client
-# Signing key of Status List Tokens. Used only if you enable the credential of the same name
-# in conf/openid-vci-credentials.xml. Must be EC key.
-idp.signing.oauth.statuslist.es.key = %{idp.home}/credentials/oauth-statuslist-signing-es.jwk
+# Storage for Credential Offers. Requires server-side storage
+#openidvci.StorageService = shibboleth.StorageService
-# Signing key of Credential Issuer metadata. Used only if you enable the credential of the
-# same name in conf/openid-vci-credentials.xml. Must be EC key.
-idp.signing.openidvci.issuerMetadata.es.key = %{idp.home}/credentials/openid-vci-issuer-metadata-signing-es.jwk
+# Default lifetime of the pre-authorized code
+#openidvci.preAuthorizedCode.defaultLifetime = PT10M
+# Size of pre-authorized codes (0 = untruncated)
+#openidvci.preAuthorizedCode.defaultLength = 0
-# Credential Configurations. Published in Credential Issuer metadata and used as the
-# instruction on how a credential is formed. Every flow reads them from here, through one
-# resolver, so the file is read when it changes and not once per request.
-#openidvci.credentials = %{idp.home}/metadata/verifiable-credentials.json
-#openidvci.credentials.minRefreshDelay = PT5M
-#openidvci.credentials.maxRefreshDelay = PT4H
+# The location for the JSON file of Credential Configurations, published in Credential Issuer
+# metadata and used as the instruction on how a credential is formed. Every flow reads them
+# from here, through one resolver, so the file is read when it changes and not once per request.
+#openidvci.credentialConfigurations.resource = %{idp.home}/metadata/verifiable-credentials.json
+# Bounds on the next file refresh of the Credential Configurations resource
+#openidvci.credentialConfigurations.minRefreshDelay = PT5M
+#openidvci.credentialConfigurations.maxRefreshDelay = PT4H
-# Settings for the Credential Issuer metadata flow
-# Template for metadata
+# Settings for the issuer-metadata flow
+# Flow is available at /openid/vci/issuer-metadata, usually it should be wired from /.well-known/openid-credential-issuer
#openidvci.issuerMetadata.template = %{idp.home}/static/openid-credential-issuer.json
# The template is Velocity, its variables are $issuer, $baseUrl and $host, derived from the
-# issuer of the OP.
+# issuer of the OP.
#openidvci.issuerMetadata.templated = true
#openidvci.issuerMetadata.resolver = openidvci.DefaultCredentialIssuerMetadataResolver
#openidvci.issuerMetadata.resolver.values = openidvci.issuerMetadata.DefaultDynamicValueResolvers
+# Bounds on the next file refresh of the Credential Issuer metadata resource
#openidvci.issuerMetadata.minRefreshDelay = PT5M
#openidvci.issuerMetadata.maxRefreshDelay = PT4H
# Lifetime written as 'exp' of signed metadata. Leave unset to publish it without one.
#openidvci.issuerMetadata.signedLifetime = PT4H
+# Signing key of issued Verifiable Credentials. Used only if you enable the credential of the
+# same name in conf/openid-vci-credentials.xml. Until that, Credentials are signed with the
+# OP's own signing credentials. Must be EC key.
+openidvci.signing.es.key = %{idp.home}/credentials/openid-vci-signing-es.jwk
+
+# Signing key of Status List Tokens. Used only if you enable the credential of the same name
+# in conf/openid-vci-credentials.xml. Must be EC key.
+openidvci.signing.status-list.es.key = %{idp.home}/credentials/openid-vci-status-list-signing-es.jwk
+
+# Signing key of Credential Issuer metadata. Used only if you enable the credential of the
+# same name in conf/openid-vci-credentials.xml. Must be EC key.
+openidvci.signing.issuerMetadata.es.key = %{idp.home}/credentials/openid-vci-issuer-metadata-signing-es.jwk
+
+# Settings for the status-list flows
+# The key used in permuting the status list indices
+# Do *NOT* share the key with other people, it's like divulging your private key.
+# It is suggested you move this property into credentials/secrets.properties
+openidvci.status-list.index.permutationKey = change_this_to_secret
+# Default lifetime of Status List Tokens
+#openidvci.status-list.token.defaultLifetime = PT1H
+# Length of time to keep a slot assigned after the credential expires
+#openidvci.status-list.assignment.retention = P7D
+# Storage for status list state, for slot assignments and for the slots handed out.
+# Requires server-side storage
+#openidvci.status-list.StorageService = shibboleth.StorageService
+#openidvci.status-list.assignment.StorageService = shibboleth.StorageService
+#openidvci.status-list.index.StorageService = shibboleth.StorageService
+
# Settings for stating this deployment as a Credential Issuer in OpenID Federation. Active
# only when conf/openid-vci-oidfed.xml is imported into conf/global.xml. Set to false to
# state federation_entity entirely in the federation module's own metadata file instead of
# filling display_name and logo_uri from Credential Issuer metadata.
#openidvci.oidfed.decorateFederationEntity = true
+
+# Settings for the loggingId of each flow
+#openidvci.logging.credentials = OpenID.VCI.Credentials
+#openidvci.logging.credential-offer = OpenID.VCI.CredentialOffer
+#openidvci.logging.token = OpenID.VCI.Token
+#openidvci.logging.nonce = OpenID.VCI.Nonce
+#openidvci.logging.issuer-metadata = OpenID.VCI.IssuerMetadata
+#openidvci.logging.status-list.list = OAuth.StatusList
+#openidvci.logging.status-list.revoke = OAuth.StatusList.Revoke
+#openidvci.logging.status-list.assignments = OAuth.StatusList.Assignments
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list