You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by co...@apache.org on 2017/07/05 10:31:22 UTC
cxf git commit: Instantiate the SAML Response signature validator
directly
Repository: cxf
Updated Branches:
refs/heads/master 0c307b673 -> 0287f7d3a
Instantiate the SAML Response signature validator directly
Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/0287f7d3
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/0287f7d3
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/0287f7d3
Branch: refs/heads/master
Commit: 0287f7d3a30908cdde0ca30f470f2103dab26a7c
Parents: 0c307b6
Author: Colm O hEigeartaigh <co...@apache.org>
Authored: Wed Jul 5 11:31:07 2017 +0100
Committer: Colm O hEigeartaigh <co...@apache.org>
Committed: Wed Jul 5 11:31:07 2017 +0100
----------------------------------------------------------------------
.../rs/security/saml/sso/SAMLProtocolResponseValidator.java | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cxf/blob/0287f7d3/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java
----------------------------------------------------------------------
diff --git a/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java b/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java
index 49607dc..94d369d 100644
--- a/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java
+++ b/rt/rs/security/sso/saml/src/main/java/org/apache/cxf/rs/security/saml/sso/SAMLProtocolResponseValidator.java
@@ -65,7 +65,8 @@ import org.opensaml.xmlsec.encryption.EncryptedData;
import org.opensaml.xmlsec.signature.KeyInfo;
import org.opensaml.xmlsec.signature.Signature;
import org.opensaml.xmlsec.signature.support.SignatureException;
-import org.opensaml.xmlsec.signature.support.SignatureValidator;
+import org.opensaml.xmlsec.signature.support.SignatureValidationProvider;
+import org.opensaml.xmlsec.signature.support.provider.ApacheSantuarioSignatureValidationProviderImpl;
/**
* Validate a SAML (1.1 or 2.0) Protocol Response. It validates the Response against the specs,
@@ -337,7 +338,9 @@ public class SAMLProtocolResponseValidator {
throw new WSSecurityException(WSSecurityException.ErrorCode.FAILURE, "invalidSAMLsecurity");
}
try {
- SignatureValidator.validate(signature, credential);
+ SignatureValidationProvider responseSignatureValidator =
+ new ApacheSantuarioSignatureValidationProviderImpl();
+ responseSignatureValidator.validate(signature, credential);
} catch (SignatureException ex) {
LOG.log(Level.FINE, "Error in validating the SAML Signature: " + ex.getMessage(), ex);
throw new WSSecurityException(WSSecurityException.ErrorCode.FAILURE, "invalidSAMLsecurity");