[SANTUARIO-304] No way to distinguish DataReference from a KeyReference when iterating a ReferenceList

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Java 1.4.6, Java 1.5.1
• Fix Version/s: Java 1.5.2
• Component/s: Java
• Security Level: Public (Public issues, viewable by everyone)
• Assignee: Colm O hEigeartaigh
• Reporter: Clement Pellerin
• Created: 16/Mar/12 19:59
• Updated: 14/May/12 08:51
• Resolved: 21/Mar/12 10:46

Description

An EncryptedKey can contain a ReferenceList that points to the EncryptedData.
WS-Security also extends XML Encryption to allow an independent ReferenceList.
The goal is to iterate over the ReferenceList to know which elements must be decrypted.

ReferenceList.getReferences() returns an Iterator<Reference> that can enumerate the references.
Unfortunately, there is no way to determine whether the Reference is a DataReference or a KeyReference.
Both DataReference and KeyReference classes are private so instanceof does not work.
The Reference interface does not contain a method to return the type a la org.w3c.dom.Node.getNodeType()
It is too ugly to compare the class name to DataReferenceImpl, so the only work-around is to reparse the ReferenceList by hand.