You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by "Hoefer, Filip" <fi...@atos.net> on 2014/04/30 14:36:53 UTC

Unwanted reuse of OnBehalfOf assertions

Hello,

is there a way to force the Fediz IdP to always request a new OnBehalfOf assertion instead of reusing an old one that was previously issued for the current browser session? The problem is that I validate the OnBehalfOf assertions via an external system. The cached OnBehalfOf assertions may be invalid at the time of their re-use. Turning the cache off would be the easiest solution. Is there a way to achieve that?

Thank you in advance

   Filip Hofer


RE: Unwanted reuse of OnBehalfOf assertions

Posted by "Hoefer, Filip" <fi...@atos.net>.
I will create one next week.

Many thanks

   Filip

-----Original Message-----
From: Colm O hEigeartaigh [mailto:coheigea@apache.org] 
Sent: Wednesday, April 30, 2014 6:05 PM
To: users@cxf.apache.org
Subject: Re: Unwanted reuse of OnBehalfOf assertions

I don't think there is right now. But it should be straightforward enough to implement. Could you create a JIRA?

Colm.


On Wed, Apr 30, 2014 at 1:36 PM, Hoefer, Filip <fi...@atos.net> wrote:

> Hello,
>
> is there a way to force the Fediz IdP to always request a new 
> OnBehalfOf assertion instead of reusing an old one that was previously 
> issued for the current browser session? The problem is that I validate 
> the OnBehalfOf assertions via an external system. The cached 
> OnBehalfOf assertions may be invalid at the time of their re-use. 
> Turning the cache off would be the easiest solution. Is there a way to achieve that?
>
> Thank you in advance
>
>    Filip Hofer
>
>


--
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Unwanted reuse of OnBehalfOf assertions

Posted by Colm O hEigeartaigh <co...@apache.org>.
I don't think there is right now. But it should be straightforward enough
to implement. Could you create a JIRA?

Colm.


On Wed, Apr 30, 2014 at 1:36 PM, Hoefer, Filip <fi...@atos.net> wrote:

> Hello,
>
> is there a way to force the Fediz IdP to always request a new OnBehalfOf
> assertion instead of reusing an old one that was previously issued for the
> current browser session? The problem is that I validate the OnBehalfOf
> assertions via an external system. The cached OnBehalfOf assertions may be
> invalid at the time of their re-use. Turning the cache off would be the
> easiest solution. Is there a way to achieve that?
>
> Thank you in advance
>
>    Filip Hofer
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com