Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-6660

SamlTokenInterceptor Jasypt decryption

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 3.1.3
    • 3.1.5, 3.0.8
    • JAX-WS Runtime
    • None
    • cxf 3.1.2, wss4j 2.1.2, spring boot 1.2.6

    • Unknown

    Description

      This is happening when using SamlTokenInterceptor to validate the inbound saml token via WS-SecurityPolicy.

      It seems that the crypto get back from SamlTokenInterceptor is always having null PasswordEncryptor. The keystore password is not therefore decrypted properly.

      SamlTokenInterceptor.java line 320:
      crypto = CryptoFactory.getInstance(properties);

      Attachments

        Activity

          People

            coheigea Colm O hEigeartaigh
            shaka Ethan Ma
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: