Shibboleth Developer's Meeting, 2022-03-18

Call Administrivia

09:00 Central US / 10:00 Eastern US / 14:00 UK / 16:00 FI

The US is on Daylight savings time, whilst Europe is not. Meeting times in Europe are therefore one hour ‘earlier’ than usual.

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2022-04-01. Any reason to deviate from this?

60 to 90 minute call window.

This week's call will use the Zoom system at GU, see ZoomGU for access info.

m2 checking on by default
- Is this the correct default?
- -P central-disabled is no more
java-mvn-enforcer releases
- -data 1.0.2
Did the releases from docker with an ssh tunnel.
- Are we good to turn off external access?
The bug in maven which required us to turn off checksum checking on our repos has been fixed.

Finished initial round of OP doc updates
Re-did view changes after last meeting to eliminate some bloat and get more insight into accessibility. Boy, the new HTML tags are interesting (and completely under-spec’d).
- Mac’s screen reader is at least usable to get some insight.
- No idea why SauceLabs doesn’t like our HTML, I don’t think there’s anything wrong with it and the checkers I tried agree.
Made a lot of additions and alterations to the new OIDC registration access token process
Hit a bunch of consent-related issues this week, some long dormant bugs. Hopefully didn’t break CAS but added a number of fixes there to handle consent better (e.g. it embeds consented IDs like OIDC does so per-session and client-side consent can work).
- Don’t see a lot of point trying to do this for SAML and it would only be possible in a subset of configs anyway.