Shibboleth Developer's Meeting, 2022-04-01

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2022-04-15. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

1. 4.2 schedule

   1. (PS) status of GEN-299: Remove Nexus from public internetOpen for the release.

2. Disable integration tests on commit jobs?

3. Matt Borja: key verification

Attendees:

Brent

Daniel

Henri

• JOIDC-86: Facilitate login_hint sanitizationClosed

  • Late addition due to finding in another project (and product)

• Unit / flow / deployment testing and bug-fixing. Looks good now. All three will be closed once documentation is finished.

  • JOIDC-76: Facilitate custom response header settings (e.g. CORS)Closed

  • JOIDC-21: Use token authentication for OIDC dynamic client registrationClosed

  • JOIDC-61: Support metadata policies in the dyn. reg. profile configurationClosed

Ian

John

• Succeeded in having a Fargate task run an RPM build for one of the SP components and store the products to EFS.

  • Currently working on scripting the stages to run under Jenkins. So far have the script to build the image builder image mostly working. Next, will need to write the script to build the builder images with the image builder image. Then finally to build the RPMs with the builder images.

Marvin

Phil

• Small updates for DuoOIDC plugin ready for 1.2.0

  • JDUO-59: Decode the raw JWT and log at DEBUG level in the Nimbus clientClosed

  • JDUO-56: Audit the Duo 'factor' used when authenticatingClosed

  • JDUO-50: Duo universal SDK updateClosed

  • Tested on my upgraded (to 4.2.0-SNAPSHOT) IdP.

    • Small issue with wrong oidc.common version, fixed now.

    • Seems to work fine.

• RP

  • Cleanup to JOIDCRP-13: Client Authentication ResolverClosed and JOIDCRP-14: Client Identifier ResolutionClosed

  • Trust engine stuff from next week.

• IdP 4.1.6 build

Rod

• Chasing my tail with enforcer-data releases

• Enforcer release

• IDP-1928: Plugin Installer saves absolute paths for plugin contentsClosed

• starting OSJ-342: Investigate Strategies to end of life our use of Hibernate in V5Closed

• Question: Is it worth looking at a Maven Plugin to do the msi generation (on a suitable setup machine)?

Scott

Last week was finishing up last minute work on 4.2, not much productive this week other than the Spring research. Will try to get some testing of 4.2 done today.

Tom

• nada (patching)

Other