You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ws.apache.org by co...@apache.org on 2013/07/23 13:19:04 UTC
svn commit: r1505973 -
/webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java
Author: coheigea
Date: Tue Jul 23 11:19:04 2013
New Revision: 1505973
URL: http://svn.apache.org/r1505973
Log:
Don't try to validate "Never" tokens
Modified:
webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java
Modified: webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java
URL: http://svn.apache.org/viewvc/webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java?rev=1505973&r1=1505972&r2=1505973&view=diff
==============================================================================
--- webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java (original)
+++ webservices/wss4j/trunk/ws-security-policy-stax/src/main/java/org/apache/wss4j/policy/stax/PolicyEnforcer.java Tue Jul 23 11:19:04 2013
@@ -243,7 +243,9 @@ public class PolicyEnforcer implements S
// Don't return a Token that is not required
SPConstants.IncludeTokenType includeTokenType =
((AbstractToken)abstractSecurityAssertion).getIncludeTokenType();
- if (initiator && includeTokenType == IncludeTokenType.INCLUDE_TOKEN_ALWAYS_TO_RECIPIENT) {
+ if (includeTokenType == IncludeTokenType.INCLUDE_TOKEN_NEVER) {
+ return assertableList;
+ } else if (initiator && includeTokenType == IncludeTokenType.INCLUDE_TOKEN_ALWAYS_TO_RECIPIENT) {
return assertableList;
} else if (initiator && includeTokenType == IncludeTokenType.INCLUDE_TOKEN_ONCE) {
return assertableList;