You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@cxf.apache.org by "Colm O hEigeartaigh (JIRA)" <ji...@apache.org> on 2013/09/13 15:59:55 UTC

[jira] [Resolved] (CXF-5277) ConditionsProvider receives limited information from SAMLTokenRenewer

     [ https://issues.apache.org/jira/browse/CXF-5277?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh resolved CXF-5277.
--------------------------------------

    Resolution: Fixed
    
> ConditionsProvider receives limited information from SAMLTokenRenewer
> ---------------------------------------------------------------------
>
>                 Key: CXF-5277
>                 URL: https://issues.apache.org/jira/browse/CXF-5277
>             Project: CXF
>          Issue Type: Improvement
>          Components: STS
>    Affects Versions: 2.7.6
>            Reporter: Ethan Wallwork
>            Assignee: Colm O hEigeartaigh
>             Fix For: 2.6.10, 2.7.7
>
>
> The ConditionsProvider receives only the appliesToAddress and lifetime when called from SAMLTokenRenewer.  This is in contrast to issue operations where the full TokenProviderParameters is passed.  This makes it difficult to calculate conditions based on other attributes of the request.  For example, a ConditionsProvider implementation may wish to restrict renewals to a limited time period based on the AuthnInstant attribute of an AuthnStatement in the assertion being renewed.
> If the full TokenRenewerParamters were passed instead then the necessary information would be available to perform more complex calculations.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira