[CXF-2657] Support issued tokens for AsymmetricBinding Initiator Token property.

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.3
• Fix Version/s: 2.4
• Component/s: WS-* Components
• Estimated Complexity: Advanced
• Assignee: Colm O hEigeartaigh
• Reporter: David Valeri
• Created: 05/Feb/10 14:41
• Updated: 02/May/13 02:29
• Resolved: 09/Mar/11 18:01

Description

An IssuedToken assertion in the InitiatorToken of an AsymmetricBinding assertion does not trigger the inclusion of the IssuedTokenInterceptor. One must include an IssuedTokenAssertion as a SupportingToken in order to enable the interceptor. Furthermore, the AsymmetricBinding outbound code does not support using issued tokens for signature creation.

The following policy extract should trigger the IssuedTokenInerceptor and the asymmetric binding code should support using issued tokens for the asymmetric binding.

<sp:AsymmetricBinding>
  <wsp:Policy>
    <sp:InitiatorToken>
      <wsp:Policy>
        <sp:IssuedToken sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
          <sp:Issuer>
            ...
          </sp:Issuer>
          <sp:RequestSecurityTokenTemplate>
            ...
          </sp:RequestSecurityTokenTemplate>
        </sp:IssuedToken>
      </wsp:Policy>
    </sp:InitiatorToken>
    ...
  <wsp:Policy>
<sp:AsymmetricBinding>

The desired token type is a SAML 1.1 assertion.

Issue Links

• is depended upon by: CXF-3225 Add support for saml tokens in sp:InitiatorToken