Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Date: Mon, 22 Oct 2012 20:24:11 +0000 (UTC)
From: "Oliver Wulff (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: <871667929.12105.1350937451905.JavaMail.jiratomcat@arcas>
In-Reply-To: <1213131032.22392.1349902864569.JavaMail.jiratomcat@arcas>
Subject: [jira] [Updated] (FEDIZ-30) Relying Party can enforce
 re-authentication using wfresh parameter
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


     [ https://issues.apache.org/jira/browse/FEDIZ-30?page=3Dcom.atlassian.=
jira.plugin.system.issuetabpanels:all-tabpanel ]

Oliver Wulff updated FEDIZ-30:
------------------------------

    Fix Version/s: 1.0.2
   =20
> Relying Party can enforce re-authentication using wfresh parameter
> ------------------------------------------------------------------
>
>                 Key: FEDIZ-30
>                 URL: https://issues.apache.org/jira/browse/FEDIZ-30
>             Project: CXF-Fediz
>          Issue Type: New Feature
>          Components: IDP, Plugin
>    Affects Versions: 1.0.1
>            Reporter: Oliver Wulff
>            Assignee: Oliver Wulff
>             Fix For: 1.0.2
>
>
> An application can enforce a re-authentication by setting the wfresh para=
meter to 0 in the redirect to the IDP.
> snippet from the spec (http://docs.oasis-open.org/wsfed/federation/v1.2/o=
s/ws-federation-1.2-spec-os.html)
> wfresh
> This OPTIONAL parameter indicates the freshness requirements.  If specifi=
ed, this indicates the desired maximum age of authentication specified in m=
inutes.  An IP/STS SHOULD NOT issue a token with a longer lifetime.  If spe=
cified as =E2=80=9C0=E2=80=9D it indicates a request for the IP/STS to re-p=
rompt the user for authentication before issuing the token.    Note that th=
is serves roughly the same purpose as the Freshness element in the WS-Trust=
 SOAP RST messages.
> email thread:
> http://cxf.547215.n5.nabble.com/Logout-from-Fediz-from-single-web-applica=
tion-td5713780.html

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrato=
rs
For more information on JIRA, see: http://www.atlassian.com/software/jira