DuoOIDC InvalidPathException Illegal char <*> at index 9: classpath*:\net\shibboleth\idp\plugin\authn\duo\duo-client-factory-bean.xml

[Kazmerzak, John F]

Hi,

I am migrating from idp.authn.Duo to the idp.authn.DuoOIDC module. When the flow transfers from authn/Password to authn/DuoOIDC an exception is thrown.

ERROR {https-jsse-nio-443-exec-15} net.shibboleth.idp.authn:-2 Uncaught runtime exception
org.springframework.beans.factory.BeanDefinitionStoreException: Unexpected exception parsing XML document from URL [jar:war:file:/E:/Shibboleth/war/idp.war*/WEB-INF/lib/idp-plugin-duo-impl-1.1.1.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml]; nested exception is java.nio.file.InvalidPathException: Illegal char <*> at index 9: classpath*:\net\shibboleth\idp\plugin\authn\duo\duo-client-factory-bean.xml
	at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:417)
Caused by: java.nio.file.InvalidPathException: Illegal char <*> at index 9: classpath*:\net\shibboleth\idp\plugin\authn\duo\duo-client-factory-bean.xml
	at java.base/sun.nio.fs.WindowsPathParser.normalize(WindowsPathParser.java:182)

This is the environment I tested on.
IdP: 4.1.2
OS: Windows Server 2016
Java: Amazon Corretto 11.0.11.9.1
Servlet Container: Tomcat 9.0.50

If I edit /WEB-INF/lib/idp-plugin-duo-impl-1.1.1.jar!/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml to remove the wildcard (*) in the classpath on line 67 [1] then the authn/DuoOIDC executes without error.

Looking at the commit history [2] for idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml I see the following change.

-    <import resource="classpath*:duo-client-factory-bean.xml" />
+    <import resource="classpath*:/net/shibboleth/idp/plugin/authn/duo/duo-client-factory-bean.xml" />

Is the wildcard still necessary? If not, may I submit a Jira issue to have it removed? Does the solution to this issue originate elsewhere?

Kaz

[1] https://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=blob;f=idp-duo-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/DuoOIDC/duo-oidc-authn-beans.xml;hb=1ad154e370662647f2549fb0cec6227de070a380#l67
[2] https://git.shibboleth.net/view/?p=java-idp-plugin-duo.git;a=commitdiff;h=3bb1aa2e34e10cdf2a98a5722ebc593bac814f81