state of the upcoming OIDC RP plugin

[Philip Smart]

I’ve now released version 0.0.2 of the oidc-rp plugin and uploaded a new SNAPSHOT of the oidc-common plugin it depends on. Other than internal cleanups, there is now an RP keyset profile endpoint which exposes the RP’s public RSA or EC keys (if such keys are configured). I will add that to the RP wiki page in the next few days [1].

Make sure you install the latest odic-common snapshot even if you have installed it last time: 

./plugin.sh -i https://shibboleth.net/downloads/prerelease/oidc-common-2.2.0-SNAPSHOT.tar.gz —noCheck

./plugin.sh -i https://build.shibboleth.net/maven/releases/net/shibboleth/idp/plugin/authn/idp-plugin-oidc-rp-dist/0.0.2/idp-plugin-oidc-rp-dist-0.0.2.tar.gz —noCheck

[1] https://shibboleth.atlassian.net/l/cp/3KTSRoVJ

Phil

> On 31 Oct 2022, at 07:46, Bachl, Mathias <mathias.bachl at brz.gv.at> wrote:
> 
> Hi,
> 
> thanks a lot, I'll give it a try!
> 
> Best regards,
> Mathias
> 
> 
> -----Ursprüngliche Nachricht-----
> Von: Philip Smart <Philip.Smart at jisc.ac.uk> 
> Gesendet: Freitag, 28. Oktober 2022 18:09
> An: Shib Dev <dev at shibboleth.net>
> Cc: Bachl, Mathias <mathias.bachl at brz.gv.at>
> Betreff: Re: state of the upcoming OIDC RP plugin
> 
> Hi Mathias,
> 
> I released v0.0.1 of the oidc-rp plugin and uploaded a SNAPSHOT of the oidc-common plugin it depends on. To install as a plugin, inside the ${idp.home}/bin directory, run the following commands (plugin.bat in Windows):
> 
> ./plugin.sh -i https://shibboleth.net/downloads/prerelease/oidc-common-2.2.0-SNAPSHOT.tar.gz —noCheck
> 
> ./plugin.sh -i https://build.shibboleth.net/maven/releases/net/shibboleth/idp/plugin/authn/idp-plugin-oidc-rp-dist/0.0.1/idp-plugin-oidc-rp-dist-0.0.1.tar.gz —noCheck
> 
> Note:
>        *  —noCheck is required because neither plugin has been added to the central Shibboleth plugin version properties file yet.
>        * This will install a newer, unreleased, version of the common OIDC library which is also used by the Shibboleth OP. So I would not recommend installing this on an IdP you already have the OP installed on. Going forward this will not be an issue, but we are still testing some of those details.
> 
> The plugin is still under active development, and new versions may make breaking changes to its configuration or functionality.
> 
> Anybody else is welcome to give it a try of course.
> 
> Phil
> 
>> On 14 Oct 2022, at 13:19, Bachl, Mathias via dev <dev at shibboleth.net> wrote:
>> 
>> Hi,
>> 
>> we are looking forward to use the upcoming OIDC RP plugin in a project and attempted (and succeeded) to build and install the current snapshot build.
>> 
>> As we didn’t manage to get the OIDCProviderMetadataResolver fetching our OpenID provider’s openid-configuration so far (we see that the class is loaded in the logs but no output regarding the configured proxyIssuer URL), I wanted to ask if our attempts to get that working make sense at all at this time (and we are probably just missing a little thing), or if there are still missing essential parts of the plugin?
>> 
>> We are not expecting a complete nor stable implementation at this time at all, we are just trying to set-up a simple proxying scenario, with a single OP, to be able to build/prepare other parts of our project before the first stable release of the RP plugin is there.
>> 
>> Thanks in advance & best regards,
>> Mathias Bachl
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
> 
> 
> Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
> 
> 
> Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
> 
> 
> Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.
> 
> 
> For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice