[CXF-4442] Process OneTimeUse element of SAML assertion

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.1
• Fix Version/s: 2.7.8
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Oliver Wulff
• Created: 25/Jul/12 06:13
• Updated: 26/Nov/13 17:40
• Resolved: 20/Sep/13 15:24

Description

The OneTimeUse element is specified in secton 2.5.1.5 of the SAML core specification:
http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf

CXF service endpoint doesn't process the OneTimeUse.

Maybe the STS should set this flag if the following attribut is set:
/wst:RequestSecurityToken/wst:Renewing/@Allow=False