Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-2657

Support issued tokens for AsymmetricBinding Initiator Token property.

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.3
    • 2.4
    • WS-* Components
    • None
    • Advanced

    Description

      An IssuedToken assertion in the InitiatorToken of an AsymmetricBinding assertion does not trigger the inclusion of the IssuedTokenInterceptor. One must include an IssuedTokenAssertion as a SupportingToken in order to enable the interceptor. Furthermore, the AsymmetricBinding outbound code does not support using issued tokens for signature creation.

      The following policy extract should trigger the IssuedTokenInerceptor and the asymmetric binding code should support using issued tokens for the asymmetric binding.

      <sp:AsymmetricBinding>
        <wsp:Policy>
          <sp:InitiatorToken>
            <wsp:Policy>
              <sp:IssuedToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
                <sp:Issuer>
                  ...
                </sp:Issuer>
                <sp:RequestSecurityTokenTemplate>
                  ...
                </sp:RequestSecurityTokenTemplate>
              </sp:IssuedToken>
            </wsp:Policy>
          </sp:InitiatorToken>
          ...
        <wsp:Policy>
      <sp:AsymmetricBinding>
      

      The desired token type is a SAML 1.1 assertion.

      Attachments

        Issue Links

          Activity

            People

              coheigea Colm O hEigeartaigh
              davaleri David Valeri
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: