Shibboleth Developer's Meeting, 2019-05-17

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2019-06-07. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for see ZoomGU for access info.

AGENDA

Ian Young: GraalVM: "production"; worth any attention yet?
Jira Legacy
server Shibboleth JIRA
serverId 180d847f-bce4-36b2-9964-771bff586829
key JPAR-136
Ian Young: lists of supported vs. tested Java distributions
Scott Cantor Configuration style for new attribute mappings – many small non-XML files or few big XML files?
- https://git.shibboleth.net/view/?p=java-identity-provider.git;a=tree;f=idp-conf/src/main/resources/attributes;h=bb61be01693a743cbaeab2517758597319912a5e;hb=HEAD

Add items for discussion here

Brent

Thinking of approaching the Velocity people about taking over the Spring MVC support - any fundamental objections? The may scream "No!" but feel obligated to try.

...

Started integrating OIDC RP metadata resolution to MetadataResolverEngine
- The RP metadata will probably be expressed via custom schema extension to the RoleDescriptor element
- First version will be implemented to the OIDC plugin (i.e. on top of v3.4 codebase)

Ian

Marvin

Phil

Probably finished enough of the CSRF investigation to try out a PoC for adding anti-csrf tokens to views.
- Also, adding a PoC PredicateAccessControl using a shared secret. Usable by the RESTful admin APIs.
Continue help on OIDC claims in transcoders etc. where required.

Rod

...

Versions Compared