Return-Path: 
 <issues-return-16914-apmail-cxf-issues-archive=cxf.apache.org@cxf.apache.org>
X-Original-To: apmail-cxf-issues-archive@www.apache.org
Delivered-To: apmail-cxf-issues-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 4A5273104
	for <apmail-cxf-issues-archive@www.apache.org>;
 Fri,  6 May 2011 16:32:43 +0000 (UTC)
Received: (qmail 39849 invoked by uid 500); 6 May 2011 16:32:43 -0000
Delivered-To: apmail-cxf-issues-archive@cxf.apache.org
Received: (qmail 39829 invoked by uid 500); 6 May 2011 16:32:43 -0000
Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:issues-help@cxf.apache.org>
List-Unsubscribe: <mailto:issues-unsubscribe@cxf.apache.org>
List-Post: <mailto:issues@cxf.apache.org>
List-Id: <issues.cxf.apache.org>
Reply-To: dev@cxf.apache.org
Delivered-To: mailing list issues@cxf.apache.org
Received: (qmail 39805 invoked by uid 99); 6 May 2011 16:32:43 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 06 May 2011 16:32:43 +0000
X-ASF-Spam-Status: No, hits=-2000.0 required=5.0
	tests=ALL_TRUSTED,T_RP_MATCHES_RCVD
X-Spam-Check-By: apache.org
Received: from [140.211.11.116] (HELO hel.zones.apache.org) (140.211.11.116)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 06 May 2011 16:32:41 +0000
Received: from hel.zones.apache.org (hel.zones.apache.org [140.211.11.116])
	by hel.zones.apache.org (Postfix) with ESMTP id 4FC22C4410
	for <issues@cxf.apache.org>; Fri,  6 May 2011 16:32:03 +0000 (UTC)
Date: Fri, 6 May 2011 16:32:03 +0000 (UTC)
From: "Colm O hEigeartaigh (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: 
 <476816636.28472.1304699523323.JavaMail.tomcat@hel.zones.apache.org>
In-Reply-To: 
 <1619741385.63477.1303069806398.JavaMail.tomcat@hel.zones.apache.org>
Subject: [jira] [Resolved] (CXF-3457) Service fails to find IssuedToken
 using SAML bearer subject confirmation
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/CXF-3457?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-3457.
--------------------------------------

    Resolution: Fixed

> Service fails to find IssuedToken using SAML bearer subject confirmation
> ------------------------------------------------------------------------
>
>                 Key: CXF-3457
>                 URL: https://issues.apache.org/jira/browse/CXF-3457
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 2.4
>            Reporter: Alistair Phipps
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.4.1
>
>
> Using 4/12 2.4.0-SNAPSHOT.  IssuedTokenInInterceptor.findSecurityResult f=
ails to recognize a bearer assertion where getSubjectKeyInfo returns null. =
 This results in the message failing the policy check as the IssuedToken is=
 not added to the message.
> Sample message:
> <soap:Envelope xmlns:soap=3D"http://schemas.xmlsoap.org/soap/envelope/"><=
soap:Header><Action xmlns=3D"http://www.w3.org/2005/08/addressing">xxx</Act=
ion><MessageID xmlns=3D"http://www.w3.org/2005/08/addressing">urn:uuid:xxx<=
/MessageID><To xmlns=3D"http://www.w3.org/2005/08/addressing">xxx</To><Repl=
yTo xmlns=3D"http://www.w3.org/2005/08/addressing"><Address>http://www.w3.o=
rg/2005/08/addressing/anonymous</Address></ReplyTo><wsse:Security xmlns:wss=
e=3D"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-sec=
ext-1.0.xsd" soap:mustUnderstand=3D"1"><wsu:Timestamp xmlns:wsu=3D"http://d=
ocs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"=
 wsu:Id=3D"Timestamp-3"><wsu:Created>2011-04-17T19:22:47.886Z</wsu:Created>=
<wsu:Expires>2011-04-17T19:27:47.886Z</wsu:Expires></wsu:Timestamp><saml1:A=
ssertion xmlns:saml1=3D"urn:oasis:names:tc:SAML:1.0:assertion" AssertionID=
=3D"_xxx" IssueInstant=3D"2011-04-17T19:22:47.552Z" Issuer=3D"xxx" MajorVer=
sion=3D"1" MinorVersion=3D"1"><saml1:Conditions NotBefore=3D"2011-04-17T18:=
22:47.552Z" NotOnOrAfter=3D"2011-04-17T20:22:47.552Z"><saml1:AudienceRestri=
ctionCondition><saml1:Audience>xxx</saml1:Audience></saml1:AudienceRestrict=
ionCondition></saml1:Conditions><saml1:AttributeStatement><saml1:Subject><s=
aml1:NameIdentifier Format=3D"urn:oasis:names:tc:SAML:1.1:nameid-format:X50=
9SubjectName">xxx</saml1:NameIdentifier><saml1:SubjectConfirmation><saml1:C=
onfirmationMethod>Urn:oasis:names:tc:SAML:1.0:cm:bearer</saml1:Confirmation=
Method></saml1:SubjectConfirmation></saml1:Subject><saml1:Attribute Attribu=
teName=3D"xxx" AttributeNamespace=3D"xxx"><saml1:AttributeValue xmlns:xs=3D=
"http://www.w3.org/2001/XMLSchema" xmlns:xsi=3D"http://www.w3.org/2001/XMLS=
chema-instance" xsi:type=3D"xs:string">xxx</saml1:AttributeValue></saml1:At=
tribute></saml1:AttributeStatement><Signature:Signature xmlns=3D"http://www=
.w3.org/2000/09/xmldsig#" xmlns:Signature=3D"http://www.w3.org/2000/09/xmld=
sig#"><SignedInfo><CanonicalizationMethod Algorithm=3D"http://www.w3.org/20=
01/10/xml-exc-c14n#"/><SignatureMethod Algorithm=3D"http://www.w3.org/2000/=
09/xmldsig#rsa-sha1"/><Reference URI=3D"#_xxx"><Transforms><Transform Algor=
ithm=3D"http://www.w3.org/2000/09/xmldsig#enveloped-signature"/><Transform =
Algorithm=3D"http://www.w3.org/2001/10/xml-exc-c14n#"/></Transforms><Digest=
Method Algorithm=3D"http://www.w3.org/2000/09/xmldsig#sha1"/><DigestValue>x=
xx</DigestValue></Reference></SignedInfo><SignatureValue>xxx</SignatureValu=
e><KeyInfo><X509Data><X509SubjectName>xxx</X509SubjectName><X509Certificate=
>xxx</X509Certificate></X509Data></KeyInfo></Signature:Signature></saml1:As=
sertion></wsse:Security></soap:Header><soap:Body></soap:Body></soap:Envelop=
e>

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira