You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by Colm O hEigeartaigh <co...@apache.org> on 2014/03/03 11:39:16 UTC
Re: SAML Token saving parameter values in the service side in the
token store
Hi Freddy,
Where exactly in the code is the SecurityToken being inserted into the
TokenStore? I fixed an issue recently to avoid storing IssuedTokens in the
cache on the service side that may help you:
https://issues.apache.org/jira/browse/CXF-5584
Aside from that, could you explain where the method name/parameters/etc are
actually being stored in the SecurityToken object? I'm not familiar
off-hand with anywhere that this is done.
Colm.
On Fri, Feb 28, 2014 at 9:26 PM, Freddy Exposito <ex...@gmail.com> wrote:
> Hi All,
>
> It's happening to us that the SecurityToken representing a SAML Token in
> the
> service side is being created (and saved in the TokenStore) with references
> to the method name, parameters, etc of the web service that was called.
> It's
> even including the parameters values in the TokenStore.
>
> Is this an expected behavior? Maybe there is something in the configuration
> to avoid this or we are doing something wrong?
>
> The web services we are using are to store images so the token store size
> grows a lot due to this.
>
> Thanks,
> Freddy
>
>
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/SAML-Token-saving-parameter-values-in-the-service-side-in-the-token-store-tp5740668.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: SAML Token saving parameter values in the service side in the
token store
Posted by Colm O hEigeartaigh <co...@apache.org>.
Thanks. There is a bug that the token wasn't cloned in a particular method
- I'll fix this imminently.
Colm.
On Wed, Mar 12, 2014 at 1:49 PM, Freddy Exposito <ex...@gmail.com> wrote:
> Hi Colm,
>
> I tried with 2.7.11-SNAPSHOT and we are not having the issue anymore so it
> seems that CXF-5584 fixed it for us.
>
> It was happening in 2.7.10 in the
> IssuedTokenInterceptorProvider. IssuedTokenInInterceptor.parseHandleResults
> ()
> 'getTokenStore(message).add(token);'
>
> This is the path to the method name and parameter of the web service
> invoked.
>
> (org.apache.cxf.ws.security.tokenstore.SecurityToken)
> .token(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl)
> .ownerDocument(com.sun.xml.internal.messaging.saaj.soap.SOAPDocumentImpl)
>
> .firstChild(com.sun.xml.internal.messaging.saaj.soap.ver1_2.Envelope1_2Impl)
> .body(com.sun.xml.internal.messaging.saaj.soap.ver1_2.Body1_2Impl)
> .firstChild(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl,
> method name goes here)
> .firstChild(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl,
> parameter here)
>
> Thanks,
> Freddy
>
>
>
> --
> View this message in context:
> http://cxf.547215.n5.nabble.com/SAML-Token-saving-parameter-values-in-the-service-side-in-the-token-store-tp5740668p5741160.html
> Sent from the cxf-user mailing list archive at Nabble.com.
>
--
Colm O hEigeartaigh
Talend Community Coder
http://coders.talend.com
Re: SAML Token saving parameter values in the service side in the
token store
Posted by Freddy Exposito <ex...@gmail.com>.
Hi Colm,
I tried with 2.7.11-SNAPSHOT and we are not having the issue anymore so it
seems that CXF-5584 fixed it for us.
It was happening in 2.7.10 in the
IssuedTokenInterceptorProvider. IssuedTokenInInterceptor.parseHandleResults
()
'getTokenStore(message).add(token);'
This is the path to the method name and parameter of the web service
invoked.
(org.apache.cxf.ws.security.tokenstore.SecurityToken)
.token(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl)
.ownerDocument(com.sun.xml.internal.messaging.saaj.soap.SOAPDocumentImpl)
.firstChild(com.sun.xml.internal.messaging.saaj.soap.ver1_2.Envelope1_2Impl)
.body(com.sun.xml.internal.messaging.saaj.soap.ver1_2.Body1_2Impl)
.firstChild(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl,
method name goes here)
.firstChild(com.sun.xml.internal.messaging.saaj.soap.impl.ElementImpl,
parameter here)
Thanks,
Freddy
--
View this message in context: http://cxf.547215.n5.nabble.com/SAML-Token-saving-parameter-values-in-the-service-side-in-the-token-store-tp5740668p5741160.html
Sent from the cxf-user mailing list archive at Nabble.com.