Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
-
None
Description
AsymmetricBinding + ProtectTokens validation is not working. It fails on the following line in TokenProtectionAssertion:
if (isEndorsingToken(securityToken) && !signsMainSignature(securityToken)) {
It assumes that the BinarySecurityToken is an Endorsing Token, and hence fails when it doesn't sign the Main Signature.