...
RDW:
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JMVN-68 Mostly For locally signed artifacts no longer used (xercesImpl, xml-apis)
I am reluctant to remove anything from a Keystore just because it isn't being used right now
Ditto keystores themselves.
Attendees:
Brent
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JSATTR-6 Still coming along. Progress slow over last couple of weeks due to local Project From Hell.
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JSMD-11 Completed for HTTP metadata resolvers.
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JSSH-55 We discussed this as an open question and I opened this issue to track.
Daniel
Nothing to report.
Henri
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JOIDC-222 DynamicMetadataCache (in oidc-common) based trust chain resolution
Signature validation via metadata filters (BiFunction -hook)
Finishing first prototype for automatic registration via PAR and authorize -endpoints
Ian
Nothing to report.
John
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key SSPCPP-994 Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key SSPCPP-995
Marvin
Phil
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JWEBAUTHN-27 Cleaning this up based on feedback.
Also cleaning up the registration and management UIs. Credentials can be labelled in the view. e.g.
Once merged into main, I will announce RC3.
After RC3 is announced, I will switch contexts to work on:
WebAuthn Docs
the CSRF changes in the IdP
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key IDP-2339 Updates to the Native Duo SDK
Jira Legacy server System Jira serverId f52c7d31-6eab-3f0e-93c3-231b5754d506 key JDUO-92 RP Automated tests against the OIDC conformance suite. I had a call with Henri about this, so I see a route forward
Think about HTTP APIs to the WebAuthn registration repository
Rod
Bug squashing
Jetty re-org (and fallout). No new testing
Tracking the CPP code in the windows build
...
Thanks Henri - OP Conformance Suite tests pass for IdP 5.1.3 and V5
still need to work on the logout conformance tests
do we want to probably should test previous, current, and next versions of the OP plugin ? on with both IdP 5.1.3 and 5 ? how many versions back, just one ?.2
Thanks Rod - Jetty Plugin tests a work in progress
Back to working on IDP-2323 - consent invalid data
as I have mentioned, throwing the JsonException is trivial
looking at how that would affect storage record pruning and what to do with that “feature”
...