Ex: OIDC InvalidRedirectionURI

[Paul B. Henson]

On Thu, Nov 09, 2023 at 03:59:32AM +0000, Paul B. Henson wrote:

>         <oidcmd:oidcOAuthRPExtensions grant_types="authorization_code"

After much headbanging I found the stupid silly typo that was making
things not work.

I'm not sure why the schema validation filter didn't catch it though? If
I remove "xmlns:oidcmd="urn:mace:shibboleth:metadata:oidc:1.0" from the
EntitiesDescriptor definition, it fails to load it with:

Caused by: org.xml.sax.SAXParseException: The prefix "oidcmd" for
element "oidcmd:OAuthRPExtensions" is not bound.

Looking at the xsd:

	http://shibboleth.net/schema/oidc/saml-metadata-ext-oidcmd.xsd

there is no element named "oidcOAuthRPExtensions". I added "<oidcmd:barf
foo="fred"/>" to the metadata and that passed muster too.

So I guess the xml parser checks to see if the oidcmd namespace is
declared but the schema validator doesn't actually make sure whatever is in
it is valid :(.

Oh well, that's two stupid typos I've made so far <sigh>.


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768