Sync from SUSE:SLFO:Main apache2-mod_auth_openidc revision b955d3e6ac45c42b1c2eabe1d0353401

apache2-mod_auth_openidc.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Mon Jun  2 11:27:59 UTC 2025 - pgajdos@suse.com
+
+- build with hiredis for openSUSE only [bsc#1243922]
+
+-------------------------------------------------------------------
+Wed Apr 30 06:21:42 UTC 2025 - pgajdos@suse.com
+
+- version update to 2.4.17
+  * Features
+    - proto: pass the scope parameter as returned from the token endpoint in the OIDC_scope
+      header/environment variable and make it available for Require claim scope: purposes,
+      if not available as a claim returned in the id_token or userinfo endpoint; thanks Amaury Buffet
+  * Bugfixes
+    - metadata: fix parsing the OPs token_endpoint_auth_methods_supported and avoid the log error:
+    - oidc_metadata_provider_parse: oidc_provider_token_endpoint_auth_set: invalid value
+      and falling back to client_secret_basic after that; thanks François Kooman
+    - fix memory leaks when using provider specific client keys and/or signed_jwks_uri_key in.a
+       multi-provider setup; thanks Sami Korvonen
+    - allow for regular Apache processing (e.g. setting response/security headers) by deferring HTML/HTTP
+      output generation to the content handler (instead of user id check handler) for the following use cases:
+        OIDCProviderAuthRequestMethod POST
+        OIDCPreservePost On (both internal and template-based)
+        POST page for the implicit grant type
+        Request URI handler
+        internally generated POST logout page
+        session management RP iframe
+        session management logout HTML top-window redirect page
+
 -------------------------------------------------------------------
 Tue Apr  8 06:53:53 UTC 2025 - pgajdos@suse.com
 

apache2-mod_auth_openidc.spec

@@ -18,7 +18,7 @@
 
 
 Name:           apache2-mod_auth_openidc
-Version:        2.4.16.11
+Version:        2.4.17
 Release:        0
 Summary:        Apache2.x module for an OpenID Connect enabled Identity Provider
 License:        Apache-2.0
@@ -35,7 +35,7 @@ BuildRequires:  pkgconfig(libpcre2-8)
 BuildRequires:  pkgconfig(openssl) >= 1.0.1
 Requires:       %{apache_mmn}
 Requires:       %{apache_suse_maintenance_mmn}
-%if 0%{?suse_version} >= 1550
+%if 0%{?is_opensuse}
 BuildRequires:  hiredis-devel
 %endif
 
@@ -47,10 +47,10 @@ This module enables an Apache 2.x web server to operate as an OpenID Connect Rel
 
 %build
 %configure \
-%if 0%{?is_opensuse} > 0
-  %{?_with_hiredis}    \
+%if 0%{?is_opensuse}
+  --with-hiredis
 %else
-  %{?_without_hiredis} \
+  --without-hiredis
 %endif
 
 %make_build