Shibboleth Developer's Meeting, 2023-03-03
Call Administrivia
09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI
Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-03-17. Any reason to deviate from this?
60 to 90 minute call window.
Call Details
This week's call will use the Zoom system at GU, see ZoomGU for access info.
AGENDA
Jetty 12 has entered beta phase. This requires Java 17 minimum but supposedly supports servlet 3.1, 4.0, 5.0 and 6.0, and both the
javax
andjakarta
namespaces. Somehow. They clearly see this as the future after Jetty 10 and 11 retire. What does it mean for us?Hack a thon postmortem if any feedback to raise
Add items for discussion here
Attendees:
Brent
- JSSH-16Getting issue details... STATUS
Fun with IPv6
Looking at connection reuse + TLS issue ('Connection: close' header issue), no solid ideas yet
Some minor issues to clean up
Next major project: AttributeQuery DataConnector
Daniel
Henri
Absent today
- JCOMOIDC-41Getting issue details... STATUS
Tests for signatures on issued JWTs now well covered (UserInfo, ID Token, JWT Access Token)
Finalising the tests for encrypted JWTs: will need some discussion with Phil regarding client secrets
- JOIDC-142Getting issue details... STATUS
No progress since last meeting, but will continue this once tests (task above) is finished
Ian
John
Updated Amazon Linux images
“2022” is now “2023”, still in preview release
Making progress on - SSPCPP-968Getting issue details... STATUS
Marvin
Phil
Rod
As a easy task to do during convalescence concentrated on - IDP-2069Getting issue details... STATUS
Mostly exbedding fields into locals
Some changing of annotations
A few bugs
Use of better methods (
BaseContext#getOrCreateSubContext(claz)
rather thatBaseContext#getSubContext(claz, true)
Deprecate the latter in V5?
assert
where weare replacing an NPE or
previously checked or
From package we don’t own but is known to return non-null (Instant)
Constraints the module itself cannot determine null-ness
Currently “just” getting rid of red (errors). A second pass to get rid of (much. but not all) yellow (warnings)
TBD:
idp-saml-impl
(tests)idp-conf
(tests)
I’ll send out mail when the IdP is “done” (at which stage we should all use the recommended
org.eclipse.jdt.core.prefs
OpenSAML TBD (but may require structural changes - like stopping the “null in → null out” paradigm.
Scott
Bulk of config refactoring done, moving back to SP prototyping based on new shared classes
Tom
still working on failing integration / browser tests