cxf-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sergey Beryozkin (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (CXF-5424) JAX-RS Security Code can not validate signed SAML2 bearer assertions without KeyInfo
Date Mon, 23 Dec 2013 17:51:51 GMT

     [ https://issues.apache.org/jira/browse/CXF-5424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sergey Beryozkin resolved CXF-5424.
-----------------------------------

       Resolution: Fixed
    Fix Version/s:     (was: 2.7.9)

Fixing for the 3.0.0 Milestone2 only, changes to 2.7.x are too sensitive

> JAX-RS Security Code can not validate signed SAML2 bearer assertions without KeyInfo
> ------------------------------------------------------------------------------------
>
>                 Key: CXF-5424
>                 URL: https://issues.apache.org/jira/browse/CXF-5424
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS Security
>            Reporter: Sergey Beryozkin
>             Fix For: 3.0.0-milestone2
>
>
> Signed SAML2 Bearer assertions may not always have XML Signature KeyInfo elements available.
The JAX-RS security code fails to validate such assertions but it should be able to *optionally*
validate them without KeyInfo 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Mime
View raw message