Shibboleth Developer's Meeting, 2019-05-17
Call Administrivia
09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI
Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2019-06-07. Any reason to deviate from this?
60 to 90 minute call window.
This week's call will use the Zoom system at GU, see ZoomGU for see ZoomGU for access info.
AGENDA
- Ian Young: GraalVM: "production"; worth any attention yet?
Jira Legacy server Shibboleth JIRA serverId 180d847f-bce4-36b2-9964-771bff586829 key JPAR-136 - Ian Young: lists of supported vs. tested Java distributions
- Scott Cantor Configuration style for new attribute mappings – many small non-XML files or few big XML files?
Add items for discussion here
Attendees:
Brent
- Thinking of approaching the Velocity people about taking over the Spring MVC support - any fundamental objections? The may scream "No!" but feel obligated to try.
Daniel
Henri
- Started integrating OIDC RP metadata resolution to MetadataResolverEngine
- The RP metadata will probably be expressed via custom schema extension to the RoleDescriptor element
- First version will be implemented to the OIDC plugin (i.e. on top of v3.4 codebase)
Ian
Marvin
Phil
- Probably finished enough of the CSRF investigation to try out a PoC for adding anti-csrf tokens to views.
- Also, adding a PoC PredicateAccessControl using a shared secret. Usable by the RESTful admin APIs.
- Continue help on OIDC claims in transcoders etc. where required.
Rod
- Attribute Value cleanup
- Attribute export from Data Connectors
- Watching windows tests
- Question: Is there a fully working eclipse environment for J11 yet?
Scott
- Wrapping up attribute mapping work
- Backward compatibility via resolver / AttributeEncoders
- OIDC claim support TBD
- Starting some thinking about proxying design vis a vis authentication flow design
...