You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Chris Owens (JIRA)" <ji...@apache.org> on 2012/09/21 21:35:07 UTC
[jira] [Created] (CXF-4516) Want WS-SecurityPolicy assertion
builder for RequireEmbeddedTokenReference
Chris Owens created CXF-4516:
--------------------------------
Summary: Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
Key: CXF-4516
URL: https://issues.apache.org/jira/browse/CXF-4516
Project: CXF
Issue Type: Improvement
Components: WS-* Components
Affects Versions: 2.6.2
Reporter: Chris Owens
Priority: Minor
There do not appear to be WS-SecurityPolicy assertion builders for any of the Require<foo>Reference assertions, e.g. RequireEmbeddedTokenReference.
I would be happy to start poking at this if someone would give me a 5 minute roadmap. I believe what needs to happen is in /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders; add a new assertion builder class that would be picked up by WSSecurityPolicyLoader; I can sort of guess by looking at the others what an AssertionBuilder is supposed to do, but there is probably more to it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion
builder for RequireEmbeddedTokenReference
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461884#comment-13461884 ]
Colm O hEigeartaigh commented on CXF-4516:
------------------------------------------
What does your policy look like? It's kind of a moot point about the warning anyway, as we don't support RequireEmbeddedTokenReference at this point. So it you require this support then raise a new JIRA I guess outlining your use-case.
Colm.
> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --------------------------------------------------------------------------
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
> Issue Type: Improvement
> Components: WS-* Components
> Affects Versions: 2.6.2
> Reporter: Chris Owens
> Priority: Minor
> Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the Require<foo>Reference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute roadmap. I believe what needs to happen is in /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders; add a new assertion builder class that would be picked up by WSSecurityPolicyLoader; I can sort of guess by looking at the others what an AssertionBuilder is supposed to do, but there is probably more to it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion
builder for RequireEmbeddedTokenReference
Posted by "Chris Owens (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461855#comment-13461855 ]
Chris Owens commented on CXF-4516:
----------------------------------
Thank you. Oddly, in one of my cases, RequireEmbeddedTokenReference raised a warning about there being no assertion builder for that assertion, whereas RequireIssuerSerialReference did not. I'll reduce it to a clear test case; should I append that here or open a fresh issue?
> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --------------------------------------------------------------------------
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
> Issue Type: Improvement
> Components: WS-* Components
> Affects Versions: 2.6.2
> Reporter: Chris Owens
> Priority: Minor
> Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the Require<foo>Reference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute roadmap. I believe what needs to happen is in /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders; add a new assertion builder class that would be picked up by WSSecurityPolicyLoader; I can sort of guess by looking at the others what an AssertionBuilder is supposed to do, but there is probably more to it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion
builder for RequireEmbeddedTokenReference
Posted by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461696#comment-13461696 ]
Colm O hEigeartaigh commented on CXF-4516:
------------------------------------------
There are no assertion builders for any of the Require* assertions, as they are already taken care of by the corresponding parent assertion. For example, RequireEmbeddedTokenReference is already set on the X509Token model by the X509TokenBuilder.
The problem is that no validation is done on the Require* assertions at the moment, so if you want to enforce it, I suggest looking into this instead.
> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --------------------------------------------------------------------------
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
> Issue Type: Improvement
> Components: WS-* Components
> Affects Versions: 2.6.2
> Reporter: Chris Owens
> Priority: Minor
> Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the Require<foo>Reference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute roadmap. I believe what needs to happen is in /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders; add a new assertion builder class that would be picked up by WSSecurityPolicyLoader; I can sort of guess by looking at the others what an AssertionBuilder is supposed to do, but there is probably more to it.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira