[java-idp-plugin-vci] branch bugs/LowHanging updated: Remove duplicate action. Validate PKCE

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch bugs/LowHanging
in repository java-idp-plugin-vci.

View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/e4aa3e7d4a13619b7074c9034ceee80f9e1f6409

The following commit(s) were added to refs/heads/bugs/LowHanging by this push:
     new e4aa3e7  Remove duplicate action. Validate PKCE
e4aa3e7 is described below

commit e4aa3e7d4a13619b7074c9034ceee80f9e1f6409
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Mon Sep 21 16:26:11 2026 +0300

    Remove duplicate action. Validate PKCE
---
 .../META-INF/net/shibboleth/idp/flows/openid/vci/token/token-flow.xml   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-flow.xml b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-flow.xml
index bbd08a7..f36b0e5 100644
--- a/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-flow.xml
+++ b/openid-vci-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/openid/vci/token/token-flow.xml
@@ -40,7 +40,7 @@
   <action-state id="TraditionalGrantProcessing">
     <evaluate expression="ValidateExpectedGrantType"/>
     <evaluate expression="ValidateGrant"/>
-    <evaluate expression="SetRequestedClaimsToResponseContext" />
+    <evaluate expression="ValidatePKCE"/>
     <evaluate expression="SetRequestedClaimsToResponseContext" />
     <evaluate expression="SetAuthenticationContextClassReferenceFromAuthzCodeToResponseContext" />
     <evaluate expression="SetAuthenticationTimeFromAuthzCodeToResponseContext" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.