Shibboleth Developer's Meeting, 2020-10-02

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2020-10-16. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

Add items for discussion here

Brent

Daniel

Henri

Drafted the java-oidc-common project with Phil last week
- See wiki page for the current plan
Participated to an OIDCfed interoperability event this week
- Some successful smoke-testing via PoC exploiting a fed-library from NIK-HEF
Musing ways to enable (OIDC/OAuth2) feature extensions fluently
- Some have new endpoints (e.g. Device-flow, PAR), some extend the existing endpoints (e.g. PKCE), ...
- Keep these in mind while refactoring/repackaging into the new plugin/module

...

SP
- Fixed (I hope) a 15+ year old SP bug
  - Jira Legacy
    server Shibboleth JIRA
    serverId 180d847f-bce4-36b2-9964-771bff586829
    key SSPCPP-906
- Fixed another open redirector bug, I'm done treating any of this as a security issue, not rushing out a patch
  - Jira Legacy
    server Shibboleth JIRA
    serverId 180d847f-bce4-36b2-9964-771bff586829
    key SSPCPP-907
- Waiting on a possible segfault issue report (not the config related one that came in 10/1) and then probably will be thinking about a release
Finished? modularizing core, most conf subfolders emptied out
Would like to move e.g. all the attribute related service files to streamline root folder but we'd have to special case the upgrader, not sure if worth it
Additional conversion of "dumb" XML configuration usage into properties
Started reviewing and suggesting adjustments to plugin design
- Finishing up initial workk on a property-driven plugin class
- Set up wiki space for docs, will shortly propose a standard layout for hosting plugins and update info files

Tom

Other

Versions Compared