You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ws.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2013/05/30 15:23:20 UTC
[jira] [Commented] (WSS-451) Fixed namespace prefix when creating
elements in SecurityTokenReference.java
[ https://issues.apache.org/jira/browse/WSS-451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13670336#comment-13670336 ]
Colm O hEigeartaigh commented on WSS-451:
-----------------------------------------
Where is the SecurityTokenReference being generated? A lot of the DOM Elements in WSS4J are explicitly constructed with the wsse namespace. The thing is to make sure that the WSSE namespace is correctly added to the SecurityTokenReference. It isn't by default to save on space, as typically a SecurityTokenReference is added to the security header in WSS4J which has the wsse prefix defined.
Colm.
> Fixed namespace prefix when creating elements in SecurityTokenReference.java
> ----------------------------------------------------------------------------
>
> Key: WSS-451
> URL: https://issues.apache.org/jira/browse/WSS-451
> Project: WSS4J
> Issue Type: Bug
> Components: WSS4J Core
> Affects Versions: 1.6.10
> Environment: windows/java used by apache cxf sts
> Reporter: Arthur Tew
> Assignee: Colm O hEigeartaigh
> Priority: Critical
> Labels: newbie
>
> line 443 reads Element keyId = doc.createElementNS(WSConstants.WSSE_NS, "wsse:KeyIdentifier");
> should read : doc.createElementNS(WSConstants.WSSE_NS, "KeyIdentifier");
> line 118 reads element = doc.createElementNS(WSConstants.WSSE_NS, "wsse:SecurityTokenReference");
> should read element = doc.createElementNS(WSConstants.WSSE_NS, "SecurityTokenReference");
> When a token is generated and the wsse namespace is assigned to a different prefix or is the default namespace the explicit tokens cause validations to fail.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org