[WSS-517] Cannot resolve WSS signature reference URI that points to AssertionID attribute of SAML 1.1 token

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.6.18, 2.0.3
• Component/s: WSS4J Core
• Assignee: Colm O hEigeartaigh
• Reporter: Kyle Lape
• Created: 16/Oct/14 16:57
• Updated: 09/Feb/15 10:59
• Resolved: 17/Oct/14 09:01

Description

When a SAML 1.1 token is referenced by an XML Signature reference URI in the SOAP message, WSS4J cannot find the assertion element. It looks like WSSecurityUtil.findSAMLAssertionElementById doesn't remove the hash symbol (#) before searching.