You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2018/10/05 15:57:00 UTC

[jira] [Assigned] (CXF-7864) STS: Expires lifetime is ignored if no lifetime created was specified

     [ https://issues.apache.org/jira/browse/CXF-7864?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh reassigned CXF-7864:
----------------------------------------

    Assignee: Colm O hEigeartaigh

> STS: Expires lifetime is ignored if no lifetime created was specified
> ---------------------------------------------------------------------
>
>                 Key: CXF-7864
>                 URL: https://issues.apache.org/jira/browse/CXF-7864
>             Project: CXF
>          Issue Type: Bug
>          Components: STS
>    Affects Versions: 3.2.6
>            Reporter: Thomas Papke
>            Assignee: Colm O hEigeartaigh
>            Priority: Major
>             Fix For: 3.2.7
>
>
> WS-trust define that a `/wst:RequestSecurityToken/wst:Lifetime` can be specified with only having `wsu:Expires`. In that case the creationTime shall be set to the current time. CXF simply ignore the lifetime if either expires or created is not present. (The same also for the other direction - lifetime can be also specified without expires, which is ignored as well)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)