Deprecated Warning in IdP 4.3.0 for HttpServletRequest

[Lipscomb, Gary]

Hi Scott,

I didn't think I would be seeing that message with the upgraded plugins

# /opt/shibboleth-idp/bin/plugin.sh --list
Plugin: net.shibboleth.oidc.common      Current Version: 2.1.0
Plugin: net.shibboleth.idp.plugin.authn.duo.nimbus      Current Version: 1.3.0
Plugin: net.shibboleth.idp.plugin.oidc.op       Current Version: 3.3.0

# /opt/shibboleth-idp/bin/status.sh                      
### Operating Environment Information
operating_system: Linux
operating_system_version: 4.18.0-425.3.1.el8.x86_64
operating_system_architecture: amd64
jdk_version: 11.0.17
available_cores: 2
used_memory: 311 MB
maximum_memory: 2048 MB

### Identity Provider Information
idp_version: 4.3.0
start_time: 2023-03-02T20:54:59.212Z
current_time: 2023-03-02T20:59:47.733025Z
uptime: PT4M48.521S

enabled modules: 
        idp.authn.MFA (MFA Authentication)
        idp.authn.Password (Password Authentication)
        idp.admin.Hello (Hello World)
        idp.intercept.Consent (Consent Interceptors)
        idp.intercept.ExpiringPassword (Expiring Password Interceptor)
        idp.authn.DuoOIDC (Duo "Universal Prompt" OIDC-based Authentication)
        idp.oidc.OP (OIDC OP)
        idp.oidc.common.2 (Module to provide common OIDC processing)

installed plugins: 
        net.shibboleth.idp.plugin.authn.duo.nimbus Version 1.3.0
        net.shibboleth.idp.plugin.oidc.op Version 3.3.0
        net.shibboleth.oidc.common Version 2.1.0


/opt/shibboleth-idp/logs/idp-warn.log:2023-03-03 07:58:26,760 - 10.9.246.95 - WARN [DEPRECATED:135] - Java class method 'EvaluableScript(parameters...)': This will be removed in the next major version of this software; replacement is by using the setters
/opt/shibboleth-idp/logs/idp-warn.log:2023-03-03 07:58:26,818 - 10.9.246.95 - WARN [DEPRECATED:128] - Java class method 'setHttpServletRequest', (net.shibboleth.idp.plugin.oidc.op.decoding.impl.OIDCAuthenticationRequestDecoder): This will be removed in the next major version of this software; replacement is setHttpServletRequestSupplier
/opt/shibboleth-idp/logs/idp-warn.log:2023-03-03 07:58:27,576 - 10.9.246.95 - WARN [DEPRECATED:128] - Java class method 'setHttpServletResponse', (net.shibboleth.idp.plugin.oidc.op.encoding.impl.NimbusResponseEncoder): This will be removed in the next major version of this software; replacement is setHttpServletResponseSupplier

Regards

Gary

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: Friday, 3 March 2023 01:06
To: Shib Users <users at shibboleth.net>
Cc: Lipscomb, Gary <glipscomb at csu.edu.au>
Subject: Re: Deprecated Warning in IdP 4.3.0 for HttpServletRequest

[You don't often get email from cantor.2 at osu.edu. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

> I’m just confirming that the project will be handling this one.

We did already, that's why installing 4.3 will tell you your plugins require update.

-- Scott