Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
Description
RahasData.processValidateTarget assumes that the ValidateTarget element has a SecurityTokenReference that points to the token to be used for validation. It does not handle the case that the token is attached as a direct child element of ValidateTarget (in fact it throws a NPE in this case).