org.apache.rahas.Token constructor expects lifetimeelement to be present, but
the element is optional according to the standard.
--------------------------------------------------------------------------------------------------------------------------------
Key: RAMPART-156
URL: https://issues.apache.org/jira/browse/RAMPART-156
Project: Rampart
Issue Type: Bug
Components: rampart-trust
Environment: Latest trunk of rampart + wss4j on windows xp.
Reporter: Rasmus Rhein Helwigh
Assignee: Ruchith Udayanga Fernando
The org.apache.rahas.client.STSClient.processIssueResponse class tries to
create a Token object with lifetime object as an argument. This lifetime object
is optional, but the Token constructor fails if it's null.
Since SAML1.1 has it's own lifetime element build into the assertion, it
doesn't need to use the Token lifetime element, so it would be nice if this
element could be optional.
Index:
C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java
===================================================================
---
C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java
(revision 650441)
+++
C:/src/Main/java/Rampart-svn/modules/rampart-trust/src/main/java/org/apache/rahas/Token.java
(working copy)
@@ -151,7 +151,8 @@
tokenElem.getXMLStreamReader());
stAXOMBuilder.setNamespaceURIInterning(true);
this.token = stAXOMBuilder.getDocumentElement();
- this.processLifeTime(lifetimeElem);
+ if ( lifetimeElem != null )
+ this.processLifeTime(lifetimeElem);
}
/**
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
