[CXF-4384] ClaimsAttributeStatementProvider only supports principal in WSS header but not OnBehalfOf

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.6.1
• Fix Version/s: 2.6.2
• Component/s: Services
• Estimated Complexity: Unknown
• Assignee: Oliver Wulff
• Reporter: Oliver Wulff
• Created: 17/Jun/12 13:50
• Updated: 28/Aug/12 17:44
• Resolved: 08/Aug/12 21:20

Description

If an intermediary requests a token onbehalfof the ClaimsAttributeStatementProvider ignores the principal of onbehalfof but instead uses the one of the requestor or null if requestor hasn't passed a token in WSS header.