[RAMPART-156] org.apache.rahas.Token constructor expects lifetimeelement to be present, but the element is optional according to the standard.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: rampart-trust
• Environment: Latest trunk of rampart + wss4j on windows xp.
• Assignee: Nandana Mihindukulasooriya
• Reporter: Rasmus Rhein Helwigh
• Created: 24/Apr/08 11:56
• Updated: 20/May/08 10:37

Description

The org.apache.rahas.client.STSClient.processIssueResponse class tries to create a Token object with lifetime object as an argument. This lifetime object is optional, but the Token constructor fails if it's null.

Since SAML1.1 has it's own lifetime element build into the assertion, it doesn't need to use the Token lifetime element, so it would be nice if this element could be optional.

Index: C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java
===================================================================
— C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java (revision 650441)
+++ C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java (working copy)
@@ -151,7 +151,8 @@
tokenElem.getXMLStreamReader());
stAXOMBuilder.setNamespaceURIInterning(true);
this.token = stAXOMBuilder.getDocumentElement();

• this.processLifeTime(lifetimeElem);
  + if ( lifetimeElem != null )
  + this.processLifeTime(lifetimeElem);
  }

/**