[java-idp-plugin-duo] branch main updated: Revert expiration claim to previous default

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-duo.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-duo/commit/bf1432a40cc2626245033a22496318cb94a4f108

The following commit(s) were added to refs/heads/main by this push:
     new bf1432a4 Revert expiration claim to previous default
bf1432a4 is described below

commit bf1432a40cc2626245033a22496318cb94a4f108
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Tue Sep 15 16:42:10 2026 +0100

    Revert expiration claim to previous default
    
     - The previous default is probably too long, but this update does not
    intend to address that
---
 .../idp/plugin/authn/duo/impl/PopulateDuoAuthenticationContext.java   | 4 ++--
 .../idp/plugin/authn/duo/nimbus/impl/NimbusClientSupport.java         | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/PopulateDuoAuthenticationContext.java b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/PopulateDuoAuthenticationContext.java
index 5c01978c..d59cb707 100644
--- a/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/PopulateDuoAuthenticationContext.java
+++ b/idp-duo-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/impl/PopulateDuoAuthenticationContext.java
@@ -215,7 +215,7 @@ public class PopulateDuoAuthenticationContext extends AbstractAuthenticationActi
     }
     
     /**
-     * Set the strategy used to determine the maximum authentication request to be added to the request. Returning
+     * Set the strategy used to determine the maximum authentication age to be added to the request. Returning
      * {@code null} will result in no max_age parameter being sent.
      * 
      * @param strategy the strategy to use
@@ -317,7 +317,7 @@ public class PopulateDuoAuthenticationContext extends AbstractAuthenticationActi
     	
         final Duration maxAge = duoContext.getMaxAge();
     	if (maxAge != null && maxAge.isZero()) {    		
-    		log.trace("{} Maximum authentication age is 0, setting prompt to 'login'", getLogPrefix());
+    		log.trace("{} Maximum authentication age is 0s, setting prompt to 'login'", getLogPrefix());
     		duoContext.setPrompt("login");
     	}
     }
diff --git a/idp-duo-nimbus-client-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/nimbus/impl/NimbusClientSupport.java b/idp-duo-nimbus-client-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/nimbus/impl/NimbusClientSupport.java
index 07d25c3a..22a08d8e 100644
--- a/idp-duo-nimbus-client-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/nimbus/impl/NimbusClientSupport.java
+++ b/idp-duo-nimbus-client-impl/src/main/java/net/shibboleth/idp/plugin/authn/duo/nimbus/impl/NimbusClientSupport.java
@@ -113,7 +113,7 @@ public final class NimbusClientSupport {
         Constraint.isNotEmpty(options.getUsername(), "username can not be null or empty");
         
         final Date expiration = new Date();
-        expiration.setTime(expiration.getTime() + Duration.ofMinutes(5).toMillis());
+        expiration.setTime(expiration.getTime() + Duration.ofMinutes(60).toMillis());
         
         try {            
             final JWTClaimsSet.Builder builder = new JWTClaimsSet.Builder()

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.