[java-idp-plugin-oidc-op-oidfed] 03/03: Support maximum authority hints in trust chain resolution for explicit registration

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-idp-plugin-oidc-op-oidfed.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-oidc-op-oidfed/commit/8cef96ff51c9059d2bb682058bd3610e3bdfbce0

commit 8cef96ff51c9059d2bb682058bd3610e3bdfbce0
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Fri Sep 18 10:53:41 2026 +0300

    Support maximum authority hints in trust chain resolution for explicit registration
    
    - idp.oidfed.op.explicitRegistration.cache.trustChain.maximumAuthorityHints
---
 .../net/shibboleth/idp/flows/oidfed/register/register-beans.xml    | 7 +++++++
 .../idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties     | 1 +
 2 files changed, 8 insertions(+)

diff --git a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
index ba9cbae..f2e1897 100644
--- a/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
+++ b/idp-oidfed-op-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/oidfed/register/register-beans.xml
@@ -206,6 +206,13 @@
                         </constructor-arg>
                     </bean>
                 </property>
+                <property name="criteriaToMaximumAuthorityHintsStrategy">
+                    <bean parent="shibboleth.Functions.Constant">
+                        <constructor-arg>
+                            <bean class="java.lang.Integer" factory-method="parseInt" c:_0="%{idp.oidfed.op.explicitRegistration.cache.trustChain.maximumAuthorityHints:5}" />
+                        </constructor-arg>
+                    </bean>
+                </property>
             </bean>
         </property>
     </bean>
diff --git a/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties b/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
index f00b0d4..303bf80 100644
--- a/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
+++ b/idp-oidfed-op-impl/src/main/resources/net/shibboleth/idp/plugin/oidc/op/oidfed/conf/oidfed/oidfed-op.properties
@@ -42,6 +42,7 @@ idp.oidc.requestParser.FederationRegisterRequest =
 idp.oidfed.op.explicitRegistration.ProvidedTrustChainMetadataCache = DefaultFetchThroughProvidedTrustChainMetadataCache
 idp.oidfed.op.explicitRegistration.cache.trustChain.customFilterStrategies =
 idp.oidfed.op.explicitRegistration.cache.trustChain.maximumChainLength = 5
+idp.oidfed.op.explicitRegistration.cache.trustChain.maximumAuthorityHints = 5
 idp.oidfed.op.explicitRegistration.ProvidedEntityConfigurationMetadataCache = FetchThroughProvidedEntityConfigurationMetadataCache
 idp.oidfed.op.explicitRegistration.cache.entityConfiguration.customFilterStrategies =
 idp.oidfed.op.explicitRegistration.cache.explicitRegistrationRequest.claimsValidator = shibboleth.oidfed.DefaultExplicitRegistrationRequestClaimsValidator

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.