[java-idp-plugin-oidc-op-oidfed] 02/03: Support maximum trust chain length in trust chain resolution for explicit registration

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-oidc-op-oidfed.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-oidc-op-oidfed/commit/4f4ff90e8a061bf27d131bbc613a358928e4f718

commit 4f4ff90e8a061bf27d131bbc613a358928e4f718
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Sep 18 10:36:44 2026 +0300

    Support maximum trust chain length in trust chain resolution for explicit registration
    
    - idp.oidfed.op.explicitRegistration.cache.trustChain.maximumChainLength
---
 .../shibboleth/idp/flows/oidfed/register/register-beans.xml    | 10 +++++++++-
 .../idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties |  1 +
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
index 976bcbc..ba9cbae 100644
--- a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
+++ b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
@@ -198,7 +198,15 @@
                 p:subordinateStatementCache-ref="shibboleth.oidfed.SubordinateEntityStatementMetadataCache"
                 p:localTrustAnchorsCache-ref="shibboleth.oidfed.LocalTrustAnchorsMetadataCache"
                 p:criteriaToValidContainerLifetimeStrategy-ref="ConstantFiveMinutes"
-                p:criteriaToInvalidContainerLifetimeStrategy-ref="ConstantFiveMinutes" />
+                p:criteriaToInvalidContainerLifetimeStrategy-ref="ConstantFiveMinutes">
+                <property name="criteriaToMaximumChainLengthStrategy">
+                    <bean parent="shibboleth.Functions.Constant">
+                        <constructor-arg>
+                            <bean class="java.lang.Integer" factory-method="parseInt" c:_0="%{idp.oidfed.op.explicitRegistration.cache.trustChain.maximumChainLength:5}" />
+                        </constructor-arg>
+                    </bean>
+                </property>
+            </bean>
         </property>
     </bean>
 
diff --git a/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties b/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
index 1d60480..f00b0d4 100644
--- a/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
+++ b/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
@@ -41,6 +41,7 @@ idp.service.logging.oidfeddynreg = OIDFED.Registration
 idp.oidc.requestParser.FederationRegisterRequest =
 idp.oidfed.op.explicitRegistration.ProvidedTrustChainMetadataCache = DefaultFetchThroughProvidedTrustChainMetadataCache
 idp.oidfed.op.explicitRegistration.cache.trustChain.customFilterStrategies =
+idp.oidfed.op.explicitRegistration.cache.trustChain.maximumChainLength = 5
 idp.oidfed.op.explicitRegistration.ProvidedEntityConfigurationMetadataCache = FetchThroughProvidedEntityConfigurationMetadataCache
 idp.oidfed.op.explicitRegistration.cache.entityConfiguration.customFilterStrategies =
 idp.oidfed.op.explicitRegistration.cache.explicitRegistrationRequest.claimsValidator = shibboleth.oidfed.DefaultExplicitRegistrationRequestClaimsValidator

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.