All work

Fix Principal typing issue in profile config default implementation
JCOMOIDC-101
Resolved issue: JCOMOIDC-101
Add CSP protection to views
JCOMOIDC-90
Resolved issue: JCOMOIDC-90
Add protocol message logging support to the AbstractOIDCMessageEncoder
JCOMOIDC-79
Resolved issue: JCOMOIDC-79
Fix possible NPE in JWETokenDecrypter when jcaKeyAlg is not supported by the registry
JCOMOIDC-78
Resolved issue: JCOMOIDC-78
Use security params lookup strategy in base signature security handler
JCOMOIDC-77
Decouple signature signing logic from SignJWTHandler
JCOMOIDC-76
Resolved issue: JCOMOIDC-76
Complete decode function of OIDCScopedStringAttributeTranscoder
JCOMOIDC-71
Resolved issue: JCOMOIDC-71
A128CBC-HS256 Potentially returning the wrong keysize
JCOMOIDC-61
Resolved issue: JCOMOIDC-61
Root cause logging in FilesystemClientInformationResolver
JCOMOIDC-42
Resolved issue: JCOMOIDC-42
Exclude jcip-annotations jar from parent POM
JCOMOIDC-36
Resolved issue: JCOMOIDC-36
Observations about the packaging of oidc-commons
JCOMOIDC-24

11 of 11

Fix Principal typing issue in profile config default implementation

Fixed

Basics

Logistics

Basics

Logistics

Description

As for the SAML case in , it also appears the OIDC profile configuration bean implementation of getDefaultAuthenticationMethods in AbstractOAuth2ClientAuthenticableProfileConfiguration narrows the allowed return type to AuthenticationContextClassReferencePrincipal. It should allow any Principal type, as the interface definition specifies.