RE: STS Behavior Change In CXF 3+?

2016-03-10 Thread Stephen.CTR.Chappell
al Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Thursday, March 10, 2016 11:40 AM To: users@cxf.apache.org Subject: Re: STS Behavior Change In CXF 3+? Hi Stephen, It should only add in that AttributeStatement if no other Statements are added into the generated asserti

Re: STS Behavior Change In CXF 3+?

2016-03-10 Thread Colm O hEigeartaigh
Hi Stephen, It should only add in that AttributeStatement if no other Statements are added into the generated assertion. It did have the behaviour that you specified, where the default AttributeStatement was also added to the Assertion, but this was fixed before CXF 3.1.4. Are you configuring a cu

STS Behavior Change In CXF 3+?

2016-03-09 Thread Stephen.CTR.Chappell
I've recently done some work migrating my STS implementation from using CXF 2.7.14 up to 3.1.4. In testing the upleveled STS, I noticed that a change crept in somewhere along the way when requesting a bearer token - in CXF 3, the returned token has an additional AttributeStatement: