Shibboleth Developer's Meeting, 2023-11-03

Call Administrivia

09:00 Central US / 10:00 Eastern US / 14:00 UK / 16:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2023-11-17. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

  1. Move mains up to 5.1?

  2. Javadoc publication plans

    1. Keep as part of release for consistent results?

    2. Build afterward

      1. Deploy or not deploy? With deploy-file? All or just aggregate? Do we care about them being in Nexus and available for Eclipse?

Attendees:

Brent

Daniel

 

Henri

 

Ian

 

John

  • Looking into options for (smoke) testing RPMs produced by cpp-linbuild

Marvin

 

Phil

  • Following Scott’s lead on CSP in the RP and commons. Both should be done in branches.

  • Some follow-up to Scott’s null cleanup on oidc-commons

    • Thanks for all that work, plenty of null issues in commons sadly.

  • Work on WebAuthn authentication plugin

    • Basic structure in place for an admin flow for registration and an authentication flow for err. authenticating.

    • Operating inside the MFA flow.

      • Longer term can be the first and only factor, or 2nd-factor

      • Shorter term it allows authentication flow selection, useful for the admin flow when you first need to register a key — but ‘password’ fallback is pointless long term, so this is just for testing.

    • Battling with Yubico’s JavaScript libraries to convert JSON credential creation/authentication requests that come from the server into something compatible with the webauthn apis.

 

Rod

Scott

Tom

Other