Shibboleth Developer's Meeting, 2023-06-16

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-07-07. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at OSU, see announcement for access info.

AGENDA

1. Jenkins behavior (ongoing in Slack)

2. Trim or not to trim?

Attendees:

Brent

Daniel

Henri

• Patch for oidc-common (2.2.1)

  • https://shibboleth.atlassian.net/browse/JCOMOIDC-72

• Refactoring oidc-common into the V5 codebase

  • Mostly import-statements, POM-dependencies

  • All done, except metadata-impl to be finalized

    • Unit tests for classes using HttpClient and ServiceableComponent (ReloadServiceConfigurationTest doesn’t seem to exist anymore in IdP)

  • main-branch into 3.0.0-SNAPSHOT once ready for commit?

• Next up: OP to the V5 codebase

Ian

• Java 21 (23.9 LTS) is now in “Rampdown Phase One”, i.e., feature complete.

• https://www.debian.org/News/2023/20230610.en.html

  • Java 17 explicitly mentioned in release notes this time. No other Java versions provided.

  • java-17-openjdk currently provides 17.0.6 (2023-01-17) where current is 17.0.7 (2023-04-18).

  • Smoke testing our IdP stacks (Java 11 and 17) and an IdP install, everything normal.

  • Time to add this to the “partially supported” list for both platforms.

• https://github.com/spring-projects/spring-framework/milestone/314 now a thing. May be the thing to target for v5.

• SWF 3.0.0 GA “Soon (TM)”.

John

• Preening some SPEC linting commits before pushing https://shibboleth.atlassian.net/browse/SSPCPP-969

Marvin

Phil

• oidc-common and 2.2.1 release

  • https://shibboleth.atlassian.net/browse/JCOMOIDC-71

• RP patch cleanups

  • https://shibboleth.atlassian.net/browse/JOIDCRP-33

  • https://shibboleth.atlassian.net/browse/JOIDCRP-34

• RP enhancements

  • https://shibboleth.atlassian.net/browse/JOIDCRP-35

  • https://shibboleth.atlassian.net/browse/JOIDCRP-29

    • Almost there

  • Once that is complete, I will look to release a 1.1.0 (hopefully next week)

  • After 1.1.0 I will upgrade the plugin to a V5 plugin.

Rod

• Continued installer work

  • Update command now in place and the IdP checks for updates at startup

  • Other tidy ongoing

• Recast the plugin & module classes & inheritance (https://shibboleth.atlassian.net/browse/IDP-2121)

  • V4 plugins & modules will works in V5

  • … but will not compile and should be (at least) rebased against 5.0

• Quick diversion into https://shibboleth.atlassian.net/browse/SSPCPP-976

• https://shibboleth.atlassian.net/browse/JJDBC-19

Scott

• SP patch

• https://shibboleth.atlassian.net/browse/IDP-2083

  • All reviewed except IdP, started on that. Goal is removal of annotation from all Java source.

• https://shibboleth.atlassian.net/browse/IDP-2082

  • Included a change to existing dynamic metadata metrics to default in a better name for them

  • About done here except the plugin/module state reporting, possibly worth adding a gauge for “available” IdP version too?

• https://shibboleth.atlassian.net/browse/IDP-1806

  • → https://shibboleth.atlassian.net/browse/JSSH-33

  • → https://shibboleth.atlassian.net/browse/IDP-2130

  • TL;DR, we had a lot of redundant bean definitions and a lot of missing ones in the tests, causing inconsistent observed behavior around property replacement.

  • Trying to consolidate around two context building mechanisms, SWF’s now-hooked context creation code and our builder for “everything else possible”.

• https://shibboleth.atlassian.net/browse/IDP-2068

  • Final removal of code and dependencies pending DuoOIDC incorporation of necessary classes

Tom

Other