[
https://issues.apache.org/jira/browse/CXF-6233?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh updated CXF-6233:
-------------------------------------
Fix Version/s: 3.0.4
> STS client only sends AppliesTo on first RST call
> -------------------------------------------------
>
> Key: CXF-6233
> URL: https://issues.apache.org/jira/browse/CXF-6233
> Project: CXF
> Issue Type: Bug
> Components: STS
> Affects Versions: 3.0.3
> Reporter: Thomas Johansen
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 3.0.4
>
>
> The RST call from STS client (STSClient.requestSecurityToken(...)) only sends
> the AppliesTo element first time the call is done. On subsequent calls it is
> omitted.
> Apparently this happens because the IssuedTokenInterceptorProvider sets the
> STSClient's addressingNamespace field to null in a finally block of the
> issueToken(...) method
> (org.apache.cxf.ws.security.policy.interceptors.IssuedTokenInterceptorProvider
> line 544). The STSClient requires this field to be non-null to set the
> element.
> A workaround is to enable the «addressing» feature on the CXF bus. This makes
> sure that an AddressingProperties is available on the message context, whic
> STS client uses as an alternative way to get the addressingNamespace property:
> {noformat}
> <cxf:bus>
> <cxf:features>
> <wsa:addressing allowDuplicates="false"
> xmlns:wsa="http://cxf.apache.org/ws/addressing"/>
> </cxf:features>
> </cxf:bus>
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
