You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ws.apache.org by co...@apache.org on 2013/10/03 16:40:54 UTC

svn commit: r1528892 - /webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java

Author: coheigea
Date: Thu Oct  3 14:40:53 2013
New Revision: 1528892

URL: http://svn.apache.org/r1528892
Log:
SAML Policy validation incorrectly assumes a sp:WssSamlV11Token10 refers to a SAML 1.0 token

Modified:
    webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java

Modified: webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java
URL: http://svn.apache.org/viewvc/webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java?rev=1528892&r1=1528891&r2=1528892&view=diff
==============================================================================
--- webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java (original)
+++ webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/assertionStates/SamlTokenAssertionState.java Thu Oct  3 14:40:53 2013
@@ -71,7 +71,7 @@ public class SamlTokenAssertionState ext
             final SamlAssertionWrapper samlAssertionWrapper = samlTokenSecurityEvent.getSamlAssertionWrapper();
             switch (samlToken.getSamlTokenType()) {
                 case WssSamlV11Token10:
-                    if (samlAssertionWrapper.getSamlVersion() != SAMLVersion.VERSION_10) {
+                    if (samlAssertionWrapper.getSamlVersion() != SAMLVersion.VERSION_11) {
                         setErrorMessage("Policy enforces SamlVersion11Profile10 but we got " + samlAssertionWrapper.getSamlVersion());
                         return false;
                     }