You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "David Valeri (JIRA)" <ji...@apache.org> on 2010/02/05 15:42:28 UTC

[jira] Created: (CXF-2657) Support issued tokens for AsymmetricBinding Initiator Token property.

Support issued tokens for AsymmetricBinding Initiator Token property.
---------------------------------------------------------------------

                 Key: CXF-2657
                 URL: https://issues.apache.org/jira/browse/CXF-2657
             Project: CXF
          Issue Type: Improvement
    Affects Versions: 2.3
            Reporter: David Valeri


An IssuedToken assertion in the InitiatorToken of an AsymmetricBinding assertion does not trigger the inclusion of the IssuedTokenInterceptor.  One must include an IssuedTokenAssertion as a SupportingToken in order to enable the interceptor.  Furthermore, the AsymmetricBinding outbound code does not support using issued tokens for signature creation.

The following policy extract should trigger the IssuedTokenInerceptor and the asymmetric binding code should support using issued tokens for the asymmetric binding.

{code}
<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorToken>
      <wsp:Policy>
        <sp:IssuedToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
          <sp:Issuer>
            ...
          </sp:Issuer>
          <sp:RequestSecurityTokenTemplate>
            ...
          </sp:RequestSecurityTokenTemplate>
        </sp:IssuedToken>
      </wsp:Policy>
    </sp:InitiatorToken>
    ...
  <wsp:Policy>
<sp:AsymmetricBinding>
{code}

The desired token type is a SAML 1.1 assertion.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (CXF-2657) Support issued tokens for AsymmetricBinding Initiator Token property.

Posted by "David Valeri (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CXF-2657?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

David Valeri updated CXF-2657:
------------------------------

    Component/s: WS-* Components

> Support issued tokens for AsymmetricBinding Initiator Token property.
> ---------------------------------------------------------------------
>
>                 Key: CXF-2657
>                 URL: https://issues.apache.org/jira/browse/CXF-2657
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.3
>            Reporter: David Valeri
>
> An IssuedToken assertion in the InitiatorToken of an AsymmetricBinding assertion does not trigger the inclusion of the IssuedTokenInterceptor.  One must include an IssuedTokenAssertion as a SupportingToken in order to enable the interceptor.  Furthermore, the AsymmetricBinding outbound code does not support using issued tokens for signature creation.
> The following policy extract should trigger the IssuedTokenInerceptor and the asymmetric binding code should support using issued tokens for the asymmetric binding.
> {code}
> <sp:AsymmetricBinding>
>   <wsp:Policy>
>     <sp:InitiatorToken>
>       <wsp:Policy>
>         <sp:IssuedToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
>           <sp:Issuer>
>             ...
>           </sp:Issuer>
>           <sp:RequestSecurityTokenTemplate>
>             ...
>           </sp:RequestSecurityTokenTemplate>
>         </sp:IssuedToken>
>       </wsp:Policy>
>     </sp:InitiatorToken>
>     ...
>   <wsp:Policy>
> <sp:AsymmetricBinding>
> {code}
> The desired token type is a SAML 1.1 assertion.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.