<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi list,</p>
<p>we've installed the new plugins for one client. There is a new
Deprecation in the IdP Log, <span style="font-family:monospace"><span
style="color:#000000;background-color:#ffffff;">setRetrieveUserInfoEndpointClaims
</span></span><span
style="color:#000000;background-color:#ffffff;">should be</span><span
style="font-family:monospace"><span
style="color:#000000;background-color:#ffffff;"> </span></span><span
style="font-family:monospace"><span
style="color:#000000;background-color:#ffffff;">setRetrieveUserInfoEndpointClaimsPredicate
</span></span>now. </p>
<p>I guess this stems from
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/browse/JCOMOIDC-132">https://shibboleth.atlassian.net/browse/JCOMOIDC-132</a> ... but how
can I get rid of the deprecation warning? I cannot find this
predicate when grepping in the configuration.</p>
<div class="moz-forward-container">Regards <br>
</div>
<div class="moz-forward-container">Martin<br>
</div>
<div class="moz-forward-container"><br>
</div>
<div class="moz-forward-container">-------- Weitergeleitete
Nachricht --------
<table cellpadding="0" cellspacing="0" border="0"
class="moz-email-headers-table">
<tbody>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">Betreff:
</th>
<td>OIDC OP v4.3.0 and OIDC RP Authentication Proxy v2.3.0
Now Available</td>
</tr>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">Datum: </th>
<td>Mon, 23 Jun 2025 14:56:36 +0000</td>
</tr>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">Von: </th>
<td>Philip Smart via announce
<a class="moz-txt-link-rfc2396E" href="mailto:announce@shibboleth.net"><announce@shibboleth.net></a></td>
</tr>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">Antwort
an: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">users@shibboleth.net</a></td>
</tr>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">An: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:announce@shibboleth.net">announce@shibboleth.net</a> <a class="moz-txt-link-rfc2396E" href="mailto:announce@shibboleth.net"><announce@shibboleth.net></a></td>
</tr>
<tr>
<th valign="BASELINE" align="RIGHT" nowrap="nowrap">Kopie
(CC): </th>
<td>Philip Smart <a class="moz-txt-link-rfc2396E" href="mailto:Philip.Smart@jisc.ac.uk"><Philip.Smart@jisc.ac.uk></a></td>
</tr>
</tbody>
</table>
<br>
<br>
The Shibboleth Project has released V4.3.0 of the OIDC OP plugin
(see release notes at [1]) and V2.3.0 of the OIDC RP
authentication proxy plugin (see release notes in [2]).<br>
<br>
Both releases accompany, and require, a new version of the OIDC
commons library (see release notes at [3]) and OIDC config module.<br>
<br>
Among the new features and bug fixes, both the OP and RP now
include safeguards against audience injection attacks that could
result from third-party software behavior, see the release notes.
Importantly, our software was not directly vulnerable to these
attacks, but we’ve added these configurable protections as a
proactive measure.<br>
<br>
-- Henri Mikkonen and Phil Smart, on behalf of the team<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2776760321/OPReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2776760321/OPReleaseNotes</a><br>
<br>
[2]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3239968769/OIDCRelyingPartyAuthnConfigurationReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3239968769/OIDCRelyingPartyAuthnConfigurationReleaseNotes</a><br>
<br>
[3]
<a class="moz-txt-link-freetext" href="https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3232137218/OIDCCommonReleaseNotes">https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/3232137218/OIDCCommonReleaseNotes</a><br>
<br>
Jisc is a registered charity (in England and Wales under charity
number 1149740; in Scotland under charity number SC053607) and a
company limited by guarantee registered in England under company
number 05747339, VAT number GB 197 0632 86. Jisc's registered
office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
<br>
Jisc Services Limited is a wholly owned Jisc subsidiary and a
company limited by guarantee which is registered in England under
company number 02881024, VAT number GB 197 0632 86. The registered
office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
<br>
For more details on how Jisc handles your data see our privacy
notice here: <a class="moz-txt-link-freetext" href="https://www.jisc.ac.uk/website/privacy-notice">https://www.jisc.ac.uk/website/privacy-notice</a><br>
--<br>
To unsubscribe from this list send an email to
<a class="moz-txt-link-abbreviated" href="mailto:announce-unsubscribe@shibboleth.net">announce-unsubscribe@shibboleth.net</a><br>
</div>
</body>
</html>