axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RAMPART-390) SupportingToken assertions do not support multiple nested protection assertions
Date Mon, 06 Feb 2017 11:13:41 GMT

    [ https://issues.apache.org/jira/browse/RAMPART-390?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15853846#comment-15853846
] 

Hudson commented on RAMPART-390:
--------------------------------

SUCCESS: Integrated in Jenkins build Rampart #2356 (See [https://builds.apache.org/job/Rampart/2356/])
RAMPART-390: SupportingToken assertions should support multiple nested protection assertions.
Patch provided by Stefan Vladov. (veithen: rev 1781860)
* (edit) trunk
* (edit) trunk/modules/rampart-policy/src/main/java/org/apache/ws/secpolicy/model/SupportingToken.java


> SupportingToken assertions do not support multiple nested protection assertions
> -------------------------------------------------------------------------------
>
>                 Key: RAMPART-390
>                 URL: https://issues.apache.org/jira/browse/RAMPART-390
>             Project: Rampart
>          Issue Type: Bug
>          Components: rampart-policy
>    Affects Versions: 1.6.2
>            Reporter: Stefan Vladov
>            Priority: Minor
>              Labels: Patch
>         Attachments: SupportingTokenPatch.txt
>
>
> The SupportingToken class in the rampart-policy component will only handle one of the
following protection assertions:
>  - SignedParts
>  - SignedElements
>  - EncryptedParts
>  - EncryptedElements
> According to the specification several of these may appear in a supporting token policy;
for example:
> {code}
> <sp:EncryptedSupportingTokens xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
>   <wsp:Policy>
> 	<sp:X509Token sp:IncludeToken="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/IncludeToken/Always">
> 	  <wsp:Policy>
> 		<sp:WssX509V3Token10 />
> 	  </wsp:Policy>
> 	</sp:X509Token>
>   
> 	<sp:SignedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
> 	  <sp:Body />
> 	  <sp:Header Namespace="http://localhost/HeaderNS_1" Name="HeaderLocal_1" />
> 	  <sp:Header Namespace="http://localhost/HeaderNS_2" />
> 	</sp:SignedParts>
> 	
> 	<sp:EncryptedParts xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702">
> 	  <sp:Body />
> 	  <sp:Header Namespace="http://localhost/HeaderNS_2" />
> 	</sp:EncryptedParts>
>   </wsp:Policy>
> </sp:EncryptedSupportingTokens>
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org


Mime
View raw message