[CXF-6809] SAMLRequest ID must not start with a Number

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.18, 3.1.5, 3.0.8
• Fix Version/s: 3.1.6, 3.2.0
• Component/s: JAX-RS Security
• Estimated Complexity: Unknown
• Assignee: Jan Bernhardt
• Reporter: Jan Bernhardt
• Created: 01/Mar/16 07:39
• Updated: 14/Oct/16 14:20
• Resolved: 01/Mar/16 08:15

Description

According to the XML Standard a xs:ID Element must not start with a number, but with a character or underscore instead.

http://www.datypic.com/sc/xsd/t-xsd_ID.html

Current ID generation in SAMLRequestBuilder is based on UUID generation only and can produce IDs that start with a number.

Issue Links

• relates to: FEDIZ-156 SAMLRequest ID must not start with a Number