Shibboleth Developer's Meeting, 2019-04-05

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2019-04-19. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

Add items for discussion here

• (Rod)  Nightly CI builds, If we cannot achieve "all green" can we at least cut down false positives? (see also Tom's questions)

• 3.4 patch

Attendees:

Brent

• OpenSAML and IdP patch release so far includes:

  • Some IDP deprecation logging, etc

  • OSJ-265 - Getting issue details... STATUS

  • OSJ-270 - Getting issue details... STATUS

  • OSJ-271 - Getting issue details... STATUS

  • OSJ-269 - Getting issue details... STATUS

    • Daniel, status? Looks like not quite done yet?

  • Anything else?

    • More IdP deprecation log warnings.  Jira TBD (Rod).

    • Removal of xml-apis dep from IdP.  Jira TBD (Tom).

Daniel

Henri

• GEANT OIDC plugin 1.0 released on Tuesday

  • OpenID Certification planned in April/May

• Started working with Phil on uniform/coherent OIDC metadata handling for both OP role and RP flow

Ian

• Java 11 parent project now enforcing Maven 3.5.3 for builds.

• Java 8 builds and views removed from Jenkins.

• OSJ-274 - Getting issue details... STATUS

  • 5yo Hibernate uses 14yo dom4j uses prehistoric xml-apis.

  • Couple of options for solution to the Eclipse (and potentially, later, compilation) issue:

    • (maybe) update hibernate?

    • (tested) exclude the xml-apis dependency

  • Wider issue: this ancient stuff is shipped with the IdP: dom4j-1.6.1.jar, xml-apis-1.0.b2.jar

  • May well stop both v3 and v4 building and potentially running under Java 13, or even earlier releases such as Java 11 if they backport the fix.

Marvin

Phil

• Very little to almost zero over the past few weeks. Making up days today and next week. Started to write down something on the IDP-1191, nothing of great interest at the moment: IdP Session Tracking, Session Fixation, and XSRF Testing

Rod

• Deprecations, deprecations, deprecations

• Old style RP support and the installer (but need to get installer working first)

• IDP-1429 - Getting issue details... STATUS
  .
  Need to choose caseSensitive

  • RegexSplit atribute definition

  or ignoreCase

  • ValueMap in Mapped attribute definition

  • StringMatcher attribute filter

Scott

• Nominally done with time conversion

  • Eliminated "configurable" formatting of DateTime data in XML

  • Formatting of Instants – always install a time zone ID into formatter

• IDP-1430 - Getting issue details... STATUS

• IDP-1434 - Getting issue details... STATUS

  • Working on a branch I'll push for review "sometime", not close to a real proposal yet

• Roadmap IAM Online next Wed 2 EDT