[CXF-5817] CXF's STSClient does not handle additional Schemas properly when parsing a WS-MEX response

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.7.12, 3.0.1
• Component/s: WS-* Components
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 20/Jun/14 14:45
• Updated: 16/Feb/15 16:09
• Resolved: 23/Jun/14 11:44

Description

When parsing a WS-MEX response, CXF's STSClient only looks for the WSDL definition + ignores the other MetadataSections. This is problematic with certain STS instances, which include additional Schemas in other MetadataSections, leading to errors like:

Part request defined as element

{http://docs.oasis-open.org/ws-sx/ws-trust/200512}

RequestSecurityToken which is not in the schema."

See here for more information:

http://cxf.547215.n5.nabble.com/Issue-with-WS-Trust-using-security-tokens-SAML-assertions-td5744142i20.html