Shibboleth Developer's Meeting, 2020-08-07

Call Administrivia

09:00 Central US / 10:00 Eastern US / 15:00 UK / 17:00 FI

Calls are normally the 1st and 3rd Fridays of each month. Next call would be Friday 2020-08-21. Any reason to deviate from this?

60 to 90 minute call window.

Call Details

This week's call will use the Zoom system at GU, see ZoomGU for access info.

AGENDA

Ian Young:Time to talk about branches again? See Renaming HEAD in Git.
Rod Widdowson Scott Cantor Plugin installations that require XML changes:
- How much manual intervention do we want? and if not what else?
- JDUO-10 - Getting issue details... STATUS
Plugin POMs - any open issues?

Attendees:

Brent

OSJ-304 - Getting issue details... STATUS - Some unit tests left to complete.
OSJ-321 - Getting issue details... STATUS - Thinking at least fixing the clone() method to conditionally only marshall if DOM is null is a relatively innocuous start.

Daniel

ldaptive v2 updates for IDP v4

Henri

JOIDC-5 - Getting issue details... STATUS
- (Draft) Profile documentation: OAuthRPMetadataProfile (restricted)
  - urn:mace:shibboleth:metadata:oidc:1.0 ok for namespace (schema)?
  - ACS binding URL: https://tools.ietf.org/html/rfc6749#section-3.1.2 (goes directly to redirect_uri definition)
- (Incomplete Draft) Deployer documentation: https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/OIDCSAMLMetadata

Ian

Marvin

Phil

A few testbed classpath issues.
Created a maven plugin archetype (Plugin Archetype).
- No rush, but if anybody gets a chance to try it to see if it is worth taking forward.
IDP-1588 - Getting issue details... STATUS
- Various cleanups as described by individual tickets in the plugin Jira project.
- The execution key is now encoded in the state parameter alongside a nonce.
- Adding a hook function to allow Principal collections to be added to the subject based on duo token information e.g. factors.
- Interest in JDUO-10 - Getting issue details... STATUS and hence IDP-1652 - Getting issue details... STATUS

Rod

Plugin CLI under way.
- Question: How to do output (i.e. plugin --list-full . Where output gets intermixed with logging.
Reminder: On Vacation (and probably offline) all next week.

Scott

IDP-1640 - Getting issue details... STATUS
IDP-1642 - Getting issue details... STATUS
IDP-1014 - Getting issue details... STATUS

Tom

integ test failures (still) due to IDP-1642 ?

idp.home=Volumes/workspaces/shib/shib-master/java-idp-integration-tests/test-distributions/20200805-10524508

Caused by: org.springframework.webflow.engine.builder.FlowBuilderException: Unable to get the model for this flow
at net.shibboleth.idp.profile.spring.factory.FlowModelFlowBuilder.doInit(FlowModelFlowBuilder.java:168)
Caused by: org.springframework.webflow.engine.model.builder.FlowModelBuilderException: Could not access the XML flow definition at file [/idp.home/flows/idp.home/conf/intercept/intercept-events-flow.xml]
at org.springframework.webflow.engine.model.builder.xml.XmlFlowModelBuilder.init(XmlFlowModelBuilder.java:121)
Caused by: java.io.FileNotFoundException: /idp.home/flows/idp.home/conf/intercept/intercept-events-flow.xml
at org.springframework.core.io.FileSystemResource.getInputStream(FileSystemResource.java:189)

Other