"IncludeToken/Once" is not handled properly in Rampart
------------------------------------------------------

                 Key: RAMPART-41
                 URL: https://issues.apache.org/jira/browse/RAMPART-41
             Project: Rampart
          Issue Type: Bug
          Components: rampart-policy
            Reporter: Nencho Lupanov


When you use: <sp:UsernameToken sp:IncludeToken=" 
http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/Once"; />

it is acting as :  <sp:UsernameToken 
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/
 AlwaysToRecipient" />

The username token should be sent only in the first request,but in the current 
implementation it is sent on every request.



-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to