[java-oidfed-common] 03/03: Keep the verified trust mark IDs in sync with verified trust marks.

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch main
in repository java-oidfed-common.

View the commit online:
https://codeberg.org/Shibboleth/java-oidfed-common/commit/a61896eb77cc0d8f29d590c29e13fb9c46de521e

commit a61896eb77cc0d8f29d590c29e13fb9c46de521e
Author: Henri Mikkonen <henri.mikkonen at iki.fi>
AuthorDate: Thu Sep 24 10:33:59 2026 +0300

    Keep the verified trust mark IDs in sync with verified trust marks.
---
 .../java/net/shibboleth/oidfed/profile/impl/ValidateTrustMarks.java    | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/ValidateTrustMarks.java b/oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/ValidateTrustMarks.java
index 2500e82..8958349 100644
--- a/oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/ValidateTrustMarks.java
+++ b/oidfed-common-impl/src/main/java/net/shibboleth/oidfed/profile/impl/ValidateTrustMarks.java
@@ -184,10 +184,10 @@ public class ValidateTrustMarks extends AbstractProfileAction {
         log.trace("{} Subject trust marks before validation {}", getLogPrefix(), subjectTrustMarks);
         for (final TrustMark trustMark : CollectionSupport.copyToList(subjectTrustMarks)) {
             assert trustMark != null;
+            final String trustMarkType = trustMark.getParsedPayload().getTrustMarkType();
             try {
                 final String issuer = trustMark.getIssuer();
                 final String trustMarkSubject = trustMark.getParsedPayload().getSubject();
-                final String trustMarkType = trustMark.getParsedPayload().getTrustMarkType();
                 final EntityStatement<?> issuerStatement = trustChainContext.getVerifiedTrustMarkIssuers().get(issuer);
                 if (issuerStatement == null) {
                     log.warn("{} Could not resolve trust mark issuer statement for {}", getLogPrefix(), issuer);
@@ -242,6 +242,7 @@ public class ValidateTrustMarks extends AbstractProfileAction {
                 log.warn("{} Could not fetch status via metadata cache", getLogPrefix(), e);
             }
             subjectTrustMarks.remove(trustMark);
+            subjectTrustMarkIds.remove(trustMarkType);
         }
     }
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.