You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by Al Le <al...@gmx.de> on 2013/07/20 21:20:35 UTC
Does STSClient support SignChallenge?
Hello.
WS-Trust 1.4 spec allows the process of obtaining a security token to
consist not only of two messages (request for token, response with the
token), but also to have some intermediate requests and responses. In
these intermediate requests and responses, the STS may challenge the
token requestor to answer a challenge (e.g. to sign a randomly generated
string). Only after all challenges have been aswered correctly, would
the STS sent a real token. See e.g. chapter 8.2 (Signature Challenges)
of the WS-Trust spec.
Does the CXF's STSClient support such a protocol? I.e. can it response
to the challenges? If yes, how should it be configured to do so?
Thank you!
AL
Re: Does STSClient support SignChallenge?
Posted by Colm O hEigeartaigh <co...@gmail.com>.
Hi,
No, SignChallenge is not currently supported either by the STS Client or
the STS itself. Here is a JIRA that was previously raised:
https://issues.apache.org/jira/browse/CXF-4159
Are you interested in contributing this feature?
Colm.
On Sat, Jul 20, 2013 at 8:20 PM, Al Le <al...@gmx.de> wrote:
> Hello.
>
> WS-Trust 1.4 spec allows the process of obtaining a security token to
> consist not only of two messages (request for token, response with the
> token), but also to have some intermediate requests and responses. In these
> intermediate requests and responses, the STS may challenge the token
> requestor to answer a challenge (e.g. to sign a randomly generated string).
> Only after all challenges have been aswered correctly, would the STS sent a
> real token. See e.g. chapter 8.2 (Signature Challenges) of the WS-Trust
> spec.
>
> Does the CXF's STSClient support such a protocol? I.e. can it response to
> the challenges? If yes, how should it be configured to do so?
>
> Thank you!
>
> AL
>
Re: Does STSClient support SignChallenge?
Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi,
No, SignChallenge is not currently supported either by the STS Client or
the STS itself. Here is a JIRA that was previously raised:
https://issues.apache.org/jira/browse/CXF-4159
Are you interested in contributing this feature?
On Sat, Jul 20, 2013 at 8:20 PM, Al Le <al...@gmx.de> wrote:
> Hello.
>
> WS-Trust 1.4 spec allows the process of obtaining a security token to
> consist not only of two messages (request for token, response with the
> token), but also to have some intermediate requests and responses. In these
> intermediate requests and responses, the STS may challenge the token
> requestor to answer a challenge (e.g. to sign a randomly generated string).
> Only after all challenges have been aswered correctly, would the STS sent a
> real token. See e.g. chapter 8.2 (Signature Challenges) of the WS-Trust
> spec.
>
> Does the CXF's STSClient support such a protocol? I.e. can it response to
> the challenges? If yes, how should it be configured to do so?
>
> Thank you!
>
> AL
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: Does STSClient support SignChallenge?
Posted by Alexander Levin <a....@gmx.de>.
Hello.
I'll probably have to try since this might be my task in the next
future. If I'll come up with something I'll contribute it back to the
project.
Thank you for the reference to the JIRA issue -- I'll put the patches there.
AL
> Hi,
>
> No, SignChallenge is not currently supported either by the STS Client or
> the STS itself. Here is a JIRA that was previously raised:
>
> https://issues.apache.org/jira/browse/CXF-4159
>
> Are you interested in contributing this feature?
>
> Colm.
>
> On 20.07.2013 21:20, Al Le wrote:> Hello.
>>
>> WS-Trust 1.4 spec allows the process of obtaining a security token to
>> consist not only of two messages (request for token, response with the
>> token), but also to have some intermediate requests and responses. In
>> these intermediate requests and responses, the STS may challenge the
>> token requestor to answer a challenge (e.g. to sign a randomly generated
>> string). Only after all challenges have been aswered correctly, would
>> the STS sent a real token. See e.g. chapter 8.2 (Signature Challenges)
>> of the WS-Trust spec.
>>
>> Does the CXF's STSClient support such a protocol? I.e. can it response
>> to the challenges? If yes, how should it be configured to do so?
>>
>> Thank you!
>>
>> AL