Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Shibboleth Developer's Meeting, 2020-10-02

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2020-10-16. Any reason to deviate from this?

60 to 90 minute call window.


Call Details

This week's call will use the Zoom system at GU, see ZoomGU for see ZoomGU for access info.


AGENDA

Add items for discussion here

Attendees:


Brent

  • Jira Legacy
    serverShibboleth JIRA
    columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
    serverId180d847f-bce4-36b2-9964-771bff586829
    keyOSJ-324

...

  • Drafted the java-oidc-common project with Phil last week
  • Participated to an OIDCfed interoperability event this week
    • Some successful smoke-testing via PoC exploiting a fed-library from NIK-HEF
  • Musing ways to enable (OIDC/OAuth2) feature extensions fluently
    • Some have new endpoints (e.g. Device-flow, PAR), some extend the existing endpoints (e.g. PKCE), ...
    • Keep these in mind while refactoring/repackaging into the new plugin/module

...

  • Plugins:
    • Further development on hold pending others playing with it.
    • Working with Scott on implementaion details.
      Jira Legacy
      serverShibboleth JIRA
      columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
      serverId180d847f-bce4-36b2-9964-771bff586829
      keyIDP-1683
       and 
      Jira Legacy
      serverShibboleth JIRA
      columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
      serverId180d847f-bce4-36b2-9964-771bff586829
      keyIDP-1652
    • Still an open question around logging vs System.out vs i18N - but this need not be fixed for 4.1
    • Talked to Ian about Nashorn and licensing
      • Made minor changes to the license documents we ship but we are happy that we can ship this under Apache
      • There is an open question about distributing the GraalVM bits
        • We can just bundle them The GraalVM license appears to say this is OK
          We decided to follow this modulo anyone telling that our understanding is wrong.
          We will prefer rhino in our documentation when Java >=15 become important.
        • We can prompt and download during install (which we once thought was a good idea)
        • We can make downloading them into edit-webapp a pre requisitite and blame OrackeOracle's Lawyers
          This will be a fallback
      • I have given up caring. Lets pick one and close this sorry chapter
  • Hitting low and slightly less low hanging JIRA cases
    • Notable I18N and the IdP

...