Page Comparison

Table of Contents

4.1.0 (Not released yet)

This is a feature release accompanying a new version of the OIDC commons library along with some general improvements and minor bug fixes. It is compatible with Shibboleth IdP 5.0 or later.

Jira Legacy
server System Jira jqlQuery filter=10066 count true serverId f52c7d31-6eab-3f0e-93c3-231b5754d506

OIDC Logout

The OP plugin now includes the new OPLogout profile. The new OIDC.Logout profile implements the RP-initiated logout and logout propagation via both front- and back-channel. The profile documentation has a section for slight modifications needed for two logout templates, if non-default versions prior to IdP 5.1 are used.

Acknowledgement to DAASI: their OIDC back-channel logout propagation plugin was used as a basis for this implementation.

Refresh token extensions

TODO

Policies for dynamic registration and unregistered clients

The https://shibboleth.atlassian.net/wiki/x/AoC_rw used in dynamic client registration and for unregistered clients can now be extended with custom operators. A new metadata policy operator bean provides flexible means for validating incoming requests via fully customisable set of beans. See https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2948497410/OPMetadataPolicies#Custom-operators-4.1 for details.

Metadata-driven claim naming

TODO

Identifier configuration

TODO

Message logging improvements

TODO

New configuration options

TODO

4.0.0 (September 14, 2023)

This is a feature release accompanying a new version of the OIDC commons library along with some general improvements and minor bug fixes. It is the first release that requires Shibboleth IdP 5.0.0 or later. Previous versions of the plugin are not compatible with IdP 5.

...

This is a patch release, primarily addressing

Jira Legacy
server System JIRAJira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-91

, which prevented public clients from accessing token endpoint.

...

This is a patch release, primarily addressing

Jira Legacy
server System JIRAJira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-52

, which prevented the use of authorization codes and access/refresh tokens produced by the earlier versions of the extension. Some incompatibilities still remain, they’re highlighted in https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/2769420329/OIDC+legacy+token+in+compatibilities .

...