Shibboleth Developer's Meeting, 2025-04-18

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2025-05-02. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at Ohio State:

Join Zoom Meeting
Join our Cloud HD Video Meeting

Meeting ID: 972 5379 3258
Password: 174086

AGENDA

1. IdP documentation project update/discusson (Steven)

2. “Property Dictionary” thoughts?

Attendees:

Brent

Daniel

• OSJ-410: Remove cryptacular dependencyIn Progress

Henri

• JOIDC-222: Support for OpenID FederationIn Progress

  • Initial draft implementation for the Resolve Entity API

    • Far from complete, but can already resolve RP metadata and trust chains

    • Realized that claim names related to trust marks have changed in March

  • Interop event on April 28-30

    • Conformance suite’s tests still fairly minimal, especially from OP’s perspective

Ian

• xmlsectool v4 released. Hit build issues because it has a project structure that’s not what the enforcer expects, so I’m going to branch this and rework that for v5.

• Spring Framework 7 (probably end of 2025 alongside Java 25 LTS) will use JSpecify for nullness: Null Safety in Spring applications with JSpecify and NullAway

• Deleted (or moved to their proper location in V17) all of the V11 Jenkins jobs; removed those views. Tidy!

John

• No updates

Marvin

Phil

• Absent today

• JWEBAUTHN-51: Allowing editing of nicknamesClosed

  • Key nicknames can now be updated from the registration view (I was too cautious)

• JCOMOIDC-127: Transcoding of object type of claim failsIn Progress

  • I think patching the transcoder to allow any Map type as a value (still using the minidev JSONObject as the container of the claims) is OK for the next patch release. (which is what I did in the commit it references)

• JOIDCRP-71: Possible bug in setting clientId from properties fileOpen

  • I think this one is going to need a new oidc-config and RP and OP. The OP profile beans seem to override the config ones (so they need to be removed from the OP).

• Given the new keys in the enforcer for DuoOIDC, I think I can release the next version of that next week.

• Looks like Jisc are going to approve travel to the OID Fed Interop event, so I will likely may be attending that with Henri.

Rod

• Attribute Filter new features and bug fixes (see below)

• JMVN-64: Rebase on Shibboleth Java 17 platformClosed

  • Jenkins jobs are now JDK17

  • Working from the snapshot parent pom, but looking to release the parent shortly

Scott

• JSHIBDSAML-1: Request/response correlation and passive trackingResolved

  • Implemented correlation cookie with improvements to fix current SP issues with cookie build-up.

• Returning to agent development to start reworking Attribute and Session/SessionCache APIs and implementations

• IDP-2375: Aliased decoded IdPAttributes are lost during subsequent useResolved

  • Seems to be a bug in my use of the APIs in the proxy flow, probably also impacts the RP plugin.

  • SP is affected as well.

Tom

• IDP-2323: Exception in flow, when consent goes to the databaseOpen

Other