Unexpected reproducible behavior of PermitValue rule of type ScopeRegex in Shibboleth SP 3.4.1

[Florian Lengyel]

OK, it is what it is. Fine--it's not a show-stopper.  I like the code. If I could reproduce the dev environment maybe I'll give it a shot. 
[The powers that be wants to use Oracle Access Manager (OAM) for the IdP. OAM doesn't support velocity templates--it has 
"token issuance polices," which, following procedure, had to be performance tested. 
Despite the move to OAM, you can't get rid of me--now I'm using SP3.]  

I notice that the SP3 documentation for ScopeRegex type links to IDP4 pages--I see why that was done. 

Happy New Year,
Florian

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: Tuesday, January 2, 2024 8:21 AM
To: Shib Users <users at shibboleth.net>
Cc: Florian Lengyel <Florian.Lengyel at cuny.edu>
Subject: Re: Unexpected reproducible behavior of PermitValue rule of type ScopeRegex in Shibboleth SP 3.4.1

* This email originates from a sender outside of CUNY. Verify the sender before replying or clicking on links and attachments. *

The regex library is part of Xerces. Xerces has no maintainers but myself and one other committer, and neither of us are likely to be able to fix a regex bug. So it is what it is, whatever it is, unless somebody proposes a patch.

-- Scott