You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Thomas Papke (JIRA)" <ji...@apache.org> on 2018/10/05 07:22:00 UTC

[jira] [Created] (CXF-7864) STS: Expires lifetime is ignored if no lifetime created was specified

Thomas Papke created CXF-7864:
---------------------------------

             Summary: STS: Expires lifetime is ignored if no lifetime created was specified
                 Key: CXF-7864
                 URL: https://issues.apache.org/jira/browse/CXF-7864
             Project: CXF
          Issue Type: Bug
          Components: STS
    Affects Versions: 3.2.6
            Reporter: Thomas Papke


WS-trust define that a `/wst:RequestSecurityToken/wst:Lifetime` can be specified with only having `wsu:Expires`. In that case the creationTime shall be set to the current time. CXF simply ignore the lifetime if either expires or created is not present. (The same also for the other direction - lifetime can be also specified without expires, which is ignored as well)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)