Re: Axis2 and CXF interop: Asymmetric binding and x509 endorsing token with signed parts assertion

2014-07-24 Thread detelinyordanov
I checked the behavior of Glassfish Metro web services runtime (v 2.3) using the same security policy and it matches the one of Apache Rampart, i.e. the response contains a single signature over the timestamp element. I'm attaching the respective request and response messages for reference. Deteli

Re: @context injection through setter method - method name restriction

2014-07-24 Thread Sergey Beryozkin
On 24/07/14 13:34, iris ding wrote: I think we can make it follow below two rules: 1. If the parameterType is not an Interface, just ignore the method. 2. Scan available providers to make sure there is one provider who can deal with the parametertype, otherwise, just ignore it as well. Yes, 1. c

Re: @context injection through setter method - method name restriction

2014-07-24 Thread iris ding
I think we can make it follow below two rules: 1. If the parameterType is not an Interface, just ignore the method. 2. Scan available providers to make sure there is one provider who can deal with the parametertype, otherwise, just ignore it as well. any thoughts? Iris Ding -- View this messa

Re: @context injection through setter method - method name restriction

2014-07-24 Thread Sergey Beryozkin
OK, thanks for the clarification... Note, there's some weakness in the current approach to do with the proxy being injected for custom interfaces even if no provider for a given non-standard interface exists, something that Andrey was working upon. At the moment, in such cases, NPE will be thr