Hi,

 

I’m using CAS with the SAML protocol and I just realized that the attributes
of the Principal instance are not serialized by the CAS server before they
are send to the client.

I would expect such a serialization would have been made given these
attributes are of type Map<String, Object> and not Map<String, String>.

 

In the Saml10SuccessResponseView class, we can see that all seems to be
delegated to OpenSaml because :

-          on line 131 (in cas-server-3.4.10) we have :
attribute.addValue(e.getValue()); 

-          the addValue method accepts an object.

 

It seems that OpenSaml doesn’t care about that and just calls the toString
method on each object.

 

I’m using OpenSaml 1.1b. Do you know any update which will correct this
situation ?

Do you have any other (CAS) solution ?

 

Thanks,

 

Regards,

Julien Bréda.

 


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to