Shibboleth Developer's Meeting, 2019-02-01

Brent

• Jira Legacy
  server Shibboleth JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 180d847f-bce4-36b2-9964-771bff586829 key OSJ-265

...

• Jira Legacy
  server Shibboleth JIRA columns key,summary,type,created,updated,due,assignee,reporter,priority,status,resolution serverId 180d847f-bce4-36b2-9964-771bff586829 key EDS-83

  
  
• Continued pulling deprecated stuff from Attribute filter and resolver.
  • Low hanging fruit / low merge impact changed complete and the is hugely more legible
  • Moving into the corners
    • PrincipalAuthn
    • Idp2 style NameID/NameIdentifier
  • Now have about 40 checkins queued...
• Questions:
  • Is code coverage a dead thing?
    • (iay): JaCoCo claims proper support for Java 11, as of a few days ago: https://github.com/jacoco/jacoco/releases/tag/v0.8.3; I would support trying to bring this back but only for the Java 11 / IdP V4 branch.
  • There was some discussion about being able to always preserve constructor parameter names in > Java7.  Do we still care?

Scott

• Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key IDP-1357

  • master converted to UnboundID via internal property wiring a la Santuario linefeed fix

• Jira Legacy
  server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key IDP-1405

  • This will be a pretty disruptive commit, timing?
  • Guava really making this more work than it should be, but managing
    • Significant wiring change needed to replace Functions.compose
  • Liberally replacing the most minimal anonymous classes with lambdas
  • Do we care about some of the really simple stuff? (e.g. Predicates.alwaysTrue/False)

Tom

• How to pin the stack / prevent "cross-build injection attacks"
  

...