Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cxf.apache.org
Date: Fri, 12 May 2017 12:07:04 +0000 (UTC)
From: "Colm O hEigeartaigh (JIRA)" <jira@apache.org>
To: issues@cxf.apache.org
Message-ID: <JIRA.13071308.1494531541000.196911.1494590824174@Atlassian.JIRA>
In-Reply-To: <JIRA.13071308.1494531541000@Atlassian.JIRA>
References: <JIRA.13071308.1494531541000@Atlassian.JIRA> <JIRA.13071308.1494531541699@jira-lw-us.apache.org>
Subject: [jira] [Commented] (CXF-7369) Signed element with an attribute
 named Id leaves a WSS  Id attribute in the response
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Fri, 12 May 2017 12:07:10 -0000


    [ https://issues.apache.org/jira/browse/CXF-7369?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16008025#comment-16008025 ] 

Colm O hEigeartaigh commented on CXF-7369:
------------------------------------------

The sending system is allowed add the wsu:Id attribute yes. The consumer system needs to remove the wsu:Id if it is doing schema validation. We can't remove it by default in case it was added prior to the signature creation process and causes some reference to fail.

> Signed element with an attribute named Id leaves a WSS  Id attribute in the response
> ------------------------------------------------------------------------------------
>
>                 Key: CXF-7369
>                 URL: https://issues.apache.org/jira/browse/CXF-7369
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 3.1.8, 3.1.11
>         Environment: Weblogic 12.1
> Java 1.8.0_121
> RedHat Linux
>            Reporter: Cullen Davis
>
> Setup:
> Create a Soap service that has a WssRequiredSignatureHandler.
> Create an XML Element that has an attribute named id.
> Create a soap request that uses the element with the id attribute
> Specify that body be of the Soap request be a WSS Signed Element.
> Invoke the Soap service method.
> Expected Result
> The SOAP response will have an element with a single id attribute
> Actual Result:
> The SOAP response will have an element with a expected id attribute as well as an extra wsu:Id attribute. wsu maps to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> Work Around
> Rename the attribute.


--
This message was sent by Atlassian JIRA
(v6.3.15#6346)