[java-idp-plugin-vci] branch main updated: Remove repetitive part
Codeberg
noreply at shibboleth.net
Thu Sep 24 17:55:22 UTC 2026
This is an automated email from the git hooks/post-receive script.
codeberg pushed a commit to branch main
in repository java-idp-plugin-vci.
View the commit online:
https://codeberg.org/Shibboleth/java-idp-plugin-vci/commit/e2c9b053d39b400de753b8ea240a32ca285a7812
The following commit(s) were added to refs/heads/main by this push:
new e2c9b05 Remove repetitive part
e2c9b05 is described below
commit e2c9b053d39b400de753b8ea240a32ca285a7812
Author: Janne Lauros <janne.lauros at csc.fi>
AuthorDate: Thu Sep 24 20:55:10 2026 +0300
Remove repetitive part
---
README.md | 56 ++++++++++++++++++++------------------------------------
1 file changed, 20 insertions(+), 36 deletions(-)
diff --git a/README.md b/README.md
index 9705907..e24a27f 100644
--- a/README.md
+++ b/README.md
@@ -1620,7 +1620,7 @@ and the whole *etc/jetty-rewrite-rules.xml* in [Discovery documents](#discovery-
## Reference
-### Profiles
+### Profile configuration settings
**File(s):** *conf/relying-party.xml*
**Format:** Native Spring
@@ -1628,39 +1628,6 @@ and the whole *etc/jetty-rewrite-rules.xml* in [Discovery documents](#discovery-
An endpoint is enabled by adding its profile configuration bean to a relying party. Nothing is
enabled by default.
-| Endpoint | Profile configuration bean | Profile ID | Caller | Relying party |
-|---|---|---|---|---|
-| `/idp/profile/openid/vci/issuer-metadata` | **OpenID.VCI.IssuerMetadata** | `http://geant.org/ns/profiles/openid/vci/issuer-metadata` | wallet, no authentication | anonymous |
-| `/idp/profile/oauth/authorization-server` | **OAuth.AuthorizationServer** | `http://geant.org/ns/profiles/oauth/authorization-server` | wallet, no authentication | anonymous |
-| `/idp/profile/oauth/jwt-vc-issuer` | **OAuth.JWTVCIssuer** | `http://geant.org/ns/profiles/oauth/jwt-vc-issuer` | verifier, no authentication | anonymous |
-| `/idp/profile/did/document` | **DID.Document** | `http://geant.org/ns/profiles/did/document` | verifier, no authentication | anonymous |
-| `/idp/profile/openid/vci/nonce` | **OpenID.VCI.Nonce** | `http://geant.org/ns/profiles/openid/vci/nonce` | wallet, no authentication | anonymous |
-| `/idp/profile/openid/vci/credential-offer` | **OpenID.VCI.CredentialOffer** | `http://geant.org/ns/profiles/openid/vci/credential-offer` | your own system, client authentication | the caller |
-| `/idp/profile/openid/vci/token` | **OpenID.VCI.Token** | `http://geant.org/ns/profiles/openid/vci/token` | wallet | the wallet, or anonymous for unregistered wallets |
-| `/idp/profile/openid/vci/credentials` | **OpenID.VCI.Credentials** | `http://geant.org/ns/profiles/openid/vci/credentials` | wallet, access token | the wallet, or anonymous for unregistered wallets |
-| `/idp/profile/oauth/status-list/list` | **OAuth.StatusList** | `http://geant.org/ns/profiles/oauth/status-list` | verifier, no authentication | anonymous |
-| `/idp/profile/oauth/status-list/assignments` | **OAuth.StatusList.Assignments** | `http://geant.org/ns/profiles/oauth/status-list/assignments` | your own system, client authentication | the caller |
-| `/idp/profile/oauth/status-list/revoke` | **OAuth.StatusList.Revoke** | `http://geant.org/ns/profiles/oauth/status-list/revoke` | your own system, client authentication | the caller |
-
-Profiles of the OP plugin needed with this plugin:
-
-| Profile configuration bean | Needed for |
-|---|---|
-| **OIDC.SSO** | Authorization endpoint of the authorization code flow |
-| **OAUTH2.PAR** | Pushed authorization requests |
-| **OIDC.Keyset** | `jwks_uri` of the metadata documents, keys of url credentials without a chain |
-| **OIDC.Configuration** | `/.well-known/openid-configuration` |
-| **OAUTH2.TokenAudience** | `audience` values of wallet clients |
-| **OIDFED.Configuration** | Entity Configuration, of the federation plugin |
-
-The whole file as it is at the end of [First installation, by example](#first-installation-by-example)
-is in [Relying party configuration](#relying-party-configuration).
-
-### Profile configuration settings
-
-**File(s):** *conf/relying-party.xml*
-**Format:** Native Spring
-
**OpenID.VCI.CredentialOffer**, **OpenID.VCI.Token**, **OpenID.VCI.Credentials**,
**OpenID.VCI.Nonce**, **OAuth.StatusList.Revoke** and **OAuth.StatusList.Assignments** inherit the
OAuth2 settings of the OP plugin, `tokenEndpointAuthMethods`, `accessTokenLifetime`, `forcePKCE`,
@@ -1678,15 +1645,20 @@ and inherit nothing of that. Each setting also has a `…LookupStrategy` variant
#### OpenID.VCI.IssuerMetadata
+Endpoint `/idp/profile/openid/vci/issuer-metadata`, profile ID `http://geant.org/ns/profiles/openid/vci/issuer-metadata`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `issuerMetadataSignatureSigningConfiguration` | SignatureSigningConfiguration | **openidvci.issuerMetadata.SigningConfiguration** | Signing of the metadata. Published unsigned until **openidvci.issuerMetadata.SigningCredentials** exists. Signed metadata is served for `Accept: application/jwt`. |
-**OAuth.JWTVCIssuer**, **OAuth.AuthorizationServer** and **DID.Document** have no settings of
-this plugin.
+**OAuth.JWTVCIssuer** (`/idp/profile/oauth/jwt-vc-issuer`), **OAuth.AuthorizationServer**
+(`/idp/profile/oauth/authorization-server`) and **DID.Document** (`/idp/profile/did/document`)
+have no settings of this plugin.
#### OpenID.VCI.CredentialOffer
+Endpoint `/idp/profile/openid/vci/credential-offer`, profile ID `http://geant.org/ns/profiles/openid/vci/credential-offer`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `preAuthorizedCodeLifetime` | Duration | `PT10M` | Lifetime of the pre-authorized code. Property `openidvci.preAuthorizedCode.defaultLifetime`. |
@@ -1704,6 +1676,8 @@ Response is the Credential Offer as an `openid-credential-offer://` deep link.
#### OpenID.VCI.Token
+Endpoint `/idp/profile/openid/vci/token`, profile ID `http://geant.org/ns/profiles/openid/vci/token`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `grantTypes` | Set<String> | `authorization_code`, `urn:ietf:params:oauth:grant-type:pre-authorized_code` | Grants served. The wallet client has to have the grant in its `grant_types`. |
@@ -1712,6 +1686,8 @@ Response is the Credential Offer as an `openid-credential-offer://` deep link.
#### OpenID.VCI.Credentials
+Endpoint `/idp/profile/openid/vci/credentials`, profile ID `http://geant.org/ns/profiles/openid/vci/credentials`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `credentialLifetime` | Duration | `P180D` | Validity of a credential. Decides also the Status List. Not read for a credential stating `lifetime`. |
@@ -1723,12 +1699,16 @@ Response is the Credential Offer as an `openid-credential-offer://` deep link.
#### OpenID.VCI.Nonce
+Endpoint `/idp/profile/openid/vci/nonce`, profile ID `http://geant.org/ns/profiles/openid/vci/nonce`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `proofNonceGenerator` | Function<ProfileRequestContext,String> | **openidvci.DefaultOpenIDVCINonceGenerator** | Generator of the nonce. Same as in **OpenID.VCI.Credentials**. |
#### OAuth.StatusList
+Endpoint `/idp/profile/oauth/status-list/list`, profile ID `http://geant.org/ns/profiles/oauth/status-list`.
+
| Name | Type | Default | Description |
|---|---|---|---|
| `statusListSignatureSigningConfiguration` | SignatureSigningConfiguration | **openidvci.status-list.SigningConfiguration** | Signing of Status List Tokens. |
@@ -1739,6 +1719,8 @@ that is not a month `404 unknown_status_list`.
#### OAuth.StatusList.Assignments
+Endpoint `/idp/profile/oauth/status-list/assignments`, profile ID `http://geant.org/ns/profiles/oauth/status-list/assignments`.
+
No settings of this plugin. Request, a `POST` of `application/json`:
| Name | Type | Description |
@@ -1751,6 +1733,8 @@ Response has `records`, `next` and `high_water`. Give `next` as `from` of the ne
#### OAuth.StatusList.Revoke
+Endpoint `/idp/profile/oauth/status-list/revoke`, profile ID `http://geant.org/ns/profiles/oauth/status-list/revoke`.
+
No settings of this plugin. Request, a `POST` of `application/json`, success is `204 No Content`:
| Name | Type | Description |
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list