Shibboleth Developer's Meeting, 2020-08-07

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2020-08-21. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

@Ian Young:Time to talk about branches again? See Renaming HEAD in Git.
- Resolved: proceed with this, starting with a couple of the new Java plugin repositories.
- See
  
  GEN-264 - Getting issue details... STATUS
@Rod Widdowson @Scott Cantor Plugin installations that require XML changes:
- How much manual intervention do we want? and if not what else?
- JDUO-10 - Getting issue details... STATUS
Plugin POMs - any open issues?

Brent

OSJ-304 - Getting issue details... STATUS

- Some unit tests left to complete.
OSJ-321 - Getting issue details... STATUS

- Thinking at least fixing the clone() method to conditionally only marshall if DOM is null is a relatively innocuous start.

Daniel

Henri

JOIDC-5 - Getting issue details... STATUS
- (Draft) Profile documentation: OAuthRPMetadataProfile (restricted)
  - urn:mace:shibboleth:metadata:oidc:1.0 ok for namespace (schema)?
  - ACS binding URL: https://tools.ietf.org/html/rfc6749#section-3.1.2 (goes directly to redirect_uri definition)
- (Incomplete Draft) Deployer documentation: https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/OIDCSAMLMetadata

Ian

Marvin

Phil

A few testbed classpath issues.
Created a maven plugin archetype (Plugin Archetype).
- No rush, but if anybody gets a chance to try it to see if it is worth taking forward.
IDP-1588 - Getting issue details... STATUS
- Various cleanups as described by individual tickets in the plugin Jira project.
- The execution key is now encoded in the state parameter alongside a nonce.
- Adding a hook function to allow Principal collections to be added to the subject based on duo token information e.g. factors.
- Interest in
  
  JDUO-10 - Getting issue details... STATUS
  
  and hence
  
  IDP-1652 - Getting issue details... STATUS

Rod

Plugin CLI under way.
- Question: How to do output (i.e. plugin --list-full . Where output gets intermixed with logging.
Reminder: On Vacation (and probably offline) all next week.

Scott

Tom

integ test failures (still) due to IDP-1642 ?
idp.home=Volumes/workspaces/shib/shib-master/java-idp-integration-tests/test-distributions/20200805-10524508 Caused by: org.springframework.webflow.engine.builder.FlowBuilderException: Unable to get the model for this flow at net.shibboleth.idp.profile.spring.factory.FlowModelFlowBuilder.doInit(FlowModelFlowBuilder.java:168) Caused by: org.springframework.webflow.engine.model.builder.FlowModelBuilderException: Could not access the XML flow definition at file [/idp.home/flows/idp.home/conf/intercept/intercept-events-flow.xml] at org.springframework.webflow.engine.model.builder.xml.XmlFlowModelBuilder.init(XmlFlowModelBuilder.java:121) Caused by: java.io.FileNotFoundException: /idp.home/flows/idp.home/conf/intercept/intercept-events-flow.xml at org.springframework.core.io.FileSystemResource.getInputStream(FileSystemResource.java:189)

Other