state of the upcoming OIDC RP plugin

Philip Smart Philip.Smart at jisc.ac.uk
Fri Oct 14 13:06:52 UTC 2022


Hi Mathias

> On 14 Oct 2022, at 13:19, Bachl, Mathias via dev <dev at shibboleth.net> wrote:
>
> Hi,
>
> we are looking forward to use the upcoming OIDC RP plugin in a project and attempted (and succeeded) to build and install the current snapshot build.
>
> As we didn’t manage to get the OIDCProviderMetadataResolver fetching our OpenID provider’s openid-configuration so far (we see that the class is loaded in the logs but no output regarding the configured proxyIssuer URL), I wanted to ask if our attempts to get that working make sense at all at this time (and we are probably just missing a little thing), or if there are still missing essential parts of the plugin?

It is probably still several weeks too early. That said, if you are willing to accept it might have breaking changes at any point, then more testing is a good thing. In general though, it should be working end to end, I’ve personally been testing with our own OP, the OpenID certification test suite, and Google.

I am currently ironing out issues with the plugin's assembly so it can be installed as a plugin using the normal IdP Plugin installer. You will however, also need a new version of the oidc-commons plugin as well - as lots of the new functionality is inside that library.

I will talk to Scott, but it might be something we could release as an alpha type build - but as a properly package plugin - in the new few weeks.

>
> We are not expecting a complete nor stable implementation at this time at all, we are just trying to set-up a simple proxying scenario, with a single OP, to be able to build/prepare other parts of our project before the first stable release of the RP plugin is there.

Yes, so as I say above, if you get all the correct things installed, it should be ‘working’ just not stable as you say.

Obviously very happy to take any feedback you have. Here is the issues board if you wanted to highlight or discuss something (https://shibboleth.atlassian.net/browse/JOIDCRP)

Phil

>
> Thanks in advance & best regards,
> Mathias Bachl
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net


Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice


More information about the dev mailing list