[
https://issues.apache.org/jira/browse/CXF-8579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-8579.
--------------------------------------
Resolution: Fixed
> Upgrade wss4j to v3.0.0 and OpenSAML to 4.x
> -------------------------------------------
>
> Key: CXF-8579
> URL: https://issues.apache.org/jira/browse/CXF-8579
> Project: CXF
> Issue Type: Task
> Components: STS, WS-* Components
> Affects Versions: 3.5.0
> Reporter: Misagh Moayyed
> Assignee: Colm O hEigeartaigh
> Priority: Minor
> Fix For: 4.0.0
>
>
> The next release of wss4j has switched to support OpenSAML v4. This release
> as of this writing is in SNAPSHOT mode. When testing wss4j against CXF, it
> turns out that SAMLTokenProvider is not compatible with the latest wss4j and
> opensaml v4, mainly due to the following:
>
> {code:java}
> DateTime validFrom = null;
> DateTime validTill = null;
> if (assertion.getSamlVersion().equals(SAMLVersion.VERSION_20)) {
> validFrom = assertion.getSaml2().getConditions().getNotBefore();
> validTill = assertion.getSaml2().getConditions().getNotOnOrAfter();
> } else {
> validFrom = assertion.getSaml1().getConditions().getNotBefore();
> validTill = assertion.getSaml1().getConditions().getNotOnOrAfter();
> }
> {code}
> There may be other areas that require attention.
> This Jira focuses on upgrading wss4j to the next 2.5.x line, while making
> sure opensaml v4 continues to work correctly. If possible, it would be great
> to publish a SNAPSHOT version of CXF that contains an updated 2.5.0-SNAPSHOT
> version for wss4j, and allow the user community to test it.
>
> I can surely submit a patch or pull request that attempts to handle the
> upgrade on GH, etc.
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
