Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
2.3
-
None
-
Advanced
Description
An IssuedToken assertion in the InitiatorToken of an AsymmetricBinding assertion does not trigger the inclusion of the IssuedTokenInterceptor. One must include an IssuedTokenAssertion as a SupportingToken in order to enable the interceptor. Furthermore, the AsymmetricBinding outbound code does not support using issued tokens for signature creation.
The following policy extract should trigger the IssuedTokenInerceptor and the asymmetric binding code should support using issued tokens for the asymmetric binding.
<sp:AsymmetricBinding>
<wsp:Policy>
<sp:InitiatorToken>
<wsp:Policy>
<sp:IssuedToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
<sp:Issuer>
...
</sp:Issuer>
<sp:RequestSecurityTokenTemplate>
...
</sp:RequestSecurityTokenTemplate>
</sp:IssuedToken>
</wsp:Policy>
</sp:InitiatorToken>
...
<wsp:Policy>
<sp:AsymmetricBinding>
The desired token type is a SAML 1.1 assertion.
Attachments
Issue Links
- is depended upon by
-
CXF-3225 Add support for saml tokens in sp:InitiatorToken
- Closed