You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Sergey Beryozkin (JIRA)" <ji...@apache.org> on 2013/12/23 18:49:51 UTC

[jira] [Reopened] (CXF-5424) JAX-RS Security Code can not validate signed SAML2 bearer assertions without KeyInfo

     [ https://issues.apache.org/jira/browse/CXF-5424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sergey Beryozkin reopened CXF-5424:
-----------------------------------


> JAX-RS Security Code can not validate signed SAML2 bearer assertions without KeyInfo
> ------------------------------------------------------------------------------------
>
>                 Key: CXF-5424
>                 URL: https://issues.apache.org/jira/browse/CXF-5424
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS Security
>            Reporter: Sergey Beryozkin
>             Fix For: 3.0.0-milestone2, 2.7.9
>
>
> Signed SAML2 Bearer assertions may not always have XML Signature KeyInfo elements available. The JAX-RS security code fails to validate such assertions but it should be able to *optionally* validate them without KeyInfo 



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)