You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2012/10/05 15:26:02 UTC

[jira] [Created] (CXF-4544) Create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers

Colm O hEigeartaigh created CXF-4544:
----------------------------------------

             Summary: Create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers
                 Key: CXF-4544
                 URL: https://issues.apache.org/jira/browse/CXF-4544
             Project: CXF
          Issue Type: Improvement
          Components: JAX-RS Security, WS-* Components
            Reporter: Colm O hEigeartaigh
            Assignee: Colm O hEigeartaigh
             Fix For: 2.7.0



This task is to create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers. 

At the moment, the JAX-WS layer creates a LoginSecurityContext to return the principal + roles extracted from a SAML Assertion. However, it does not store the SAML Assertion itself. The JAX-RS layer has a custom SecurityContext implementation that stores the roles etc. 

This task will add a new SAMLSecurityContext class to the rt-core module, and so downstream code can access a SAMLSecurityContext independently of whether it came from the JAX-RS or JAX-WS layer.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Resolved] (CXF-4544) Create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers

Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-4544?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-4544.
--------------------------------------

    Resolution: Fixed
    
> Create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers
> --------------------------------------------------------------------------------
>
>                 Key: CXF-4544
>                 URL: https://issues.apache.org/jira/browse/CXF-4544
>             Project: CXF
>          Issue Type: Improvement
>          Components: JAX-RS Security, WS-* Components
>            Reporter: Colm O hEigeartaigh
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.7.0
>
>
> This task is to create a common SAML-based SecurityContext for both the JAX-RS and JAX-WS layers. 
> At the moment, the JAX-WS layer creates a LoginSecurityContext to return the principal + roles extracted from a SAML Assertion. However, it does not store the SAML Assertion itself. The JAX-RS layer has a custom SecurityContext implementation that stores the roles etc. 
> This task will add a new SAMLSecurityContext class to the rt-core module, and so downstream code can access a SAMLSecurityContext independently of whether it came from the JAX-RS or JAX-WS layer.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira