You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2012/11/12 13:41:13 UTC
[jira] [Created] (CXF-4628) Only use default
AttributeStatementProvider in STS if no Claims were handled
Colm O hEigeartaigh created CXF-4628:
----------------------------------------
Summary: Only use default AttributeStatementProvider in STS if no Claims were handled
Key: CXF-4628
URL: https://issues.apache.org/jira/browse/CXF-4628
Project: CXF
Issue Type: Improvement
Components: Services
Affects Versions: 2.7.0
Reporter: Colm O hEigeartaigh
Assignee: Colm O hEigeartaigh
Fix For: 2.7.1
If the SAMLTokenProvider in the STS is not configured with any means of providing a token, it defaults to the ClaimsAttributeStatementProvider and the DefaultAttributeStatementProvider. However, this results in two AttributeStatements if a Claim is actually handled. Instead, we should only fallback to the DefaultAttributeStatementProvider if no claims was handled.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Resolved] (CXF-4628) Only use default
AttributeStatementProvider in STS if no Claims were handled
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-4628?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Colm O hEigeartaigh resolved CXF-4628.
--------------------------------------
Resolution: Fixed
> Only use default AttributeStatementProvider in STS if no Claims were handled
> ----------------------------------------------------------------------------
>
> Key: CXF-4628
> URL: https://issues.apache.org/jira/browse/CXF-4628
> Project: CXF
> Issue Type: Improvement
> Components: Services
> Affects Versions: 2.7.0
> Reporter: Colm O hEigeartaigh
> Assignee: Colm O hEigeartaigh
> Fix For: 2.7.1
>
>
> If the SAMLTokenProvider in the STS is not configured with any means of providing a token, it defaults to the ClaimsAttributeStatementProvider and the DefaultAttributeStatementProvider. However, this results in two AttributeStatements if a Claim is actually handled. Instead, we should only fallback to the DefaultAttributeStatementProvider if no claims was handled.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira