[CXF-5807] Fix STSClient configuration when Issuer EPR has an "anonymous" address

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.11, 3.0
• Fix Version/s: 2.7.12, 3.0.1
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 16/Jun/14 14:27
• Updated: 16/Feb/15 16:09
• Resolved: 16/Jun/14 15:00

Description

CXF's STSClient does not handle the case where an Issuer EPR uses an "anonymous" address in an IssuedToken security policy. The current behaviour is to use the address to find the correct endpoint + service name in the WSDL that it receives via WS-MEX. The fix should allow the user to specify an EndpointName in the Metadata configuration instead, and failing that to fall back on finding the first EndpointName in the received WSDL if the address is "anonymous".