[java-idp-plugin-vci] branch main updated (3a7d950 -> 3e86250)

[Codeberg]

This is an automated email from the git hooks/post-receive script.

codeberg pushed a change to branch main
in repository java-idp-plugin-vci.

    from 3a7d950  Merge remote-tracking branch 'origin/main' into dev/CredentialConfsAndIdentifiers
     add 8a55269  Improve access token validation as per now that we support also jwt tokens in theory
     add d44905f  Accepting access tokens only in authorizarion header as per FAPI 2.0
     add f354e2e  Authorization code lifetime per HAIP
     add e06eda4  DPoP hardening per rfc9449#section-10.1
     add 7c11d50  DPoP proof validation per rfc9449#section-4.3: 'ath' required at the credential endpoint, 'htu' matched after normalization ignoring query and fragment
     add 3e86250  Update download directory

No new revisions were added by this update.

Summary of changes:
 README.md                                          |  33 +++-
 ...eth-idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz | Bin 395645 -> 403161 bytes
 ...idp-plugin-openid-vci-0.9.0-SNAPSHOT.tar.gz.asc |  22 +--
 .../impl/OpenIDVCICredentialsRequest.java          |  12 +-
 .../DefaultOpenIDVCICredentialsConfiguration.java  |  45 ++++-
 .../SetCredentialsAudienceToResponseContext.java   |  56 ++++++
 .../profile/impl/ValidateAccessTokenBinding.java   |  63 ++++++-
 ...dAuthorizationDPoPJktManipulationStrategy.java} |  48 ++---
 .../security/impl/DPoPHttpUriClaimsValidator.java  | 122 +++++++++++++
 .../META-INF/net.shibboleth.idp/postconfig.xml     |   3 +
 .../idp/flows/openid/vci/token/token-beans.xml     |   4 +
 .../idp/flows/openid/vci/token/token-flow.xml      |   2 +
 .../idp/service/relying-party/postconfig.xml       |  93 +++++++++-
 .../impl/OpenIDVCICredentialsRequestTest.java      |  24 +++
 ...tCredentialsAudienceToResponseContextTest.java} |  31 ++--
 .../impl/ValidateAccessTokenBindingTest.java       | 201 +++++++++++++++++++++
 .../impl/DPoPHttpUriClaimsValidatorTest.java       |  97 ++++++++++
 17 files changed, 791 insertions(+), 65 deletions(-)
 create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/impl/SetCredentialsAudienceToResponseContext.java
 copy openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/profile/{impl/SetDPoPProofThumbprintToResponseContext.java => logic/PushedAuthorizationDPoPJktManipulationStrategy.java} (53%)
 create mode 100644 openid-vci-impl/src/main/java/org/geant/shibboleth/plugin/openidvci/security/impl/DPoPHttpUriClaimsValidator.java
 copy openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/impl/{SetDPoPProofThumbprintToResponseContextTest.java => SetCredentialsAudienceToResponseContextTest.java} (74%)
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/profile/impl/ValidateAccessTokenBindingTest.java
 create mode 100644 openid-vci-impl/src/test/java/org/geant/shibboleth/plugin/openidvci/security/impl/DPoPHttpUriClaimsValidatorTest.java

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.