Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Date: Fri, 13 Sep 2013 16:10:53 +0000 (UTC)
From: "Ethan Wallwork (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: <JIRA.12668327.1379011749185.129698.1379088653426@arcas>
In-Reply-To: <JIRA.12668327.1379011749185@arcas>
References: <JIRA.12668327.1379011749185@arcas>
Subject: [jira] [Commented] (CXF-5277) ConditionsProvider receives limited
 information from SAMLTokenRenewer
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/CXF-5277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13766578#comment-13766578 ] 

Ethan Wallwork commented on CXF-5277:
-------------------------------------

That fix sounds like it will work just fine.  I have to add that you are wonderfully quick in responding to submitted CXF issues!  It has made our project go much more smoothly.
                
> ConditionsProvider receives limited information from SAMLTokenRenewer
> ---------------------------------------------------------------------
>
>                 Key: CXF-5277
>                 URL: https://issues.apache.org/jira/browse/CXF-5277
>             Project: CXF
>          Issue Type: Improvement
>          Components: STS
>    Affects Versions: 2.7.6
>            Reporter: Ethan Wallwork
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.6.10, 2.7.7
>
>
> The ConditionsProvider receives only the appliesToAddress and lifetime when called from SAMLTokenRenewer.  This is in contrast to issue operations where the full TokenProviderParameters is passed.  This makes it difficult to calculate conditions based on other attributes of the request.  For example, a ConditionsProvider implementation may wish to restrict renewals to a limited time period based on the AuthnInstant attribute of an AuthnStatement in the assertion being renewed.
> If the full TokenRenewerParamters were passed instead then the necessary information would be available to perform more complex calculations.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira