Shibboleth Developer's Meeting, January 24, 2014

Attendees: 

Call Administrivia

10:00 Central US / 11:00 Eastern US / 16:00 UK

Dial-in attendee identification.

Next call is next Friday. Any reason not to meet ?

60 to 90 minute call window.

Brent

Daniel

Ian

Reorganized the dev call material in the wiki a little, it was getting unwieldy.

Spring Framework V4 transition:

• Spring Boot 1.0.0 RC1 now out
• Spring Framework 4.0.1 (bug fixes) expected Monday 27-Jan.
• Spring Webflow 2.4 now delayed to 14-Mar (RC1 12-Feb).
  
  • BUT v2.3.3 compatible with Spring Framework 4 expected Tuesday 28-Jan.
  • See https://jira.springsource.org/browse/SWF-1600
  • Already tagged on GitHub, presumably in QA now.
• Sounds like we can switch later next week. 

Moving from endorsed Xalan/Xerces to JDK-supplied JAXP implementation:

• investigating this via a deep build of the ukf-mda and UKf tooling
• pro: we wouldn't be dependent on shipping something from 2009
• pro: recent security properties work
• con: XPath/XSLT extension functions in Xalan namespace don't work
• con: ordering constraint or resolver may be needed when building schema (investigating)
  
  • should we implement a CatalogResolver to address this?

Rod

Apologies.  

• Tracking the C14N discussion and NameID generation stuff.

Scott

Tom

• Somewhat at a stopping point with the SAML 1 flow, need guidance regarding inbound and message handlers.
• Worked on flow "unit" tests, not sure if executing flows manually will be that useful, perhaps running a test SP and IdP via embedded Jetty will be.
• Note about using bean "dev" profile in ipaddress-authn-config.xml
• Question about SWF being "recursive" 
• Annotations as documentation-only for non-test code.
• Comment on Fuze audio, going silent takes some getting used to.
• Question about going to shib training

Other