[WSS-296] SubjectLocality is missing from AuthenticationStatementBean

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6
• Fix Version/s: 1.6.2
• Component/s: WSS4J Core, WSS4J Handlers
• Labels: api-change
• Environment: Eclipse, Maven, Tomcat
• Assignee: Colm O hEigeartaigh
• Reporter: Srinivasa Kukatla
• Created: 01/Jul/11 21:16
• Updated: 12/Aug/11 09:41
• Resolved: 23/Jul/11 13:51

Description

As per the saml2 core specification, Authentication Statement can have an optional SubjectLocality as defined in the saml xsd below:
<complexType name="AuthnStatementType">
<complexContent>
<extension base="saml:StatementAbstractType">
<sequence>
<element ref="saml:SubjectLocality" minOccurs="0" />
<element ref="saml:AuthnContext" />
</sequence>
<attribute name="AuthnInstant" type="dateTime" use="required" />
<attribute name="SessionIndex" type="string" use="optional" />
<attribute name="SessionNotOnOrAfter" type="dateTime" use="optional" />
</extension>
</complexContent>
</complexType>
But, AuthenticationStatementBean does not have the SubjectLocalityBean.
Please find the attached SubjectLocalityBean, as well as the AuthenticationStatementBean updated with the SubjectLocalityBean.

Example:
<saml2:AuthnStatement AuthnInstant="2009-04-16T13:10:39.093Z">
<saml2:SubjectLocality Address="11.01.124.22"
DNSName="test"></saml2:SubjectLocality>
<saml2:AuthnContext>
<saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:X509
</saml2:AuthnContextClassRef>
</saml2:AuthnContext>
</saml2:AuthnStatement>