[WSS-260] WSS4J can't process a STR to a SAML Assertion that is not in the SOAP message

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.10
• Fix Version/s: 1.6, 1.5.11
• Assignee: Colm O hEigeartaigh
• Reporter: Colm O hEigeartaigh
• Created: 20/Dec/10 17:03
• Updated: 22/Dec/10 09:47
• Resolved: 20/Dec/10 17:11

Description

WSS4J cannot find a SAML Assertion that is referenced via a SecurityTokenReference, but is not in the SOAP message. WSS4J can find a SecurityContextToken that is not in the SOAP message by invoking a CallbackHandler to find the token, so this task is to do likewise for a SAML assertion.

See this CXF JIRA:

https://issues.apache.org/jira/browse/CXF-3156