Author: coheigea
Date: Thu Dec 6 13:24:58 2012
New Revision: 1417840
URL: http://svn.apache.org/viewvc?rev=1417840&view=rev
Log:
[CXF-4679] - STS onBehalfOf validation should throw exception for invalid
tokens in issue operation
- Patch applied, thanks
Modified:
cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/operation/TokenIssueOperation.java
Modified:
cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/operation/TokenIssueOperation.java
URL:
http://svn.apache.org/viewvc/cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/operation/TokenIssueOperation.java?rev=1417840&r1=1417839&r2=1417840&view=diff
==============================================================================
---
cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/operation/TokenIssueOperation.java
(original)
+++
cxf/trunk/services/sts/sts-core/src/main/java/org/apache/cxf/sts/operation/TokenIssueOperation.java
Thu Dec 6 13:24:58 2012
@@ -116,7 +116,8 @@ public class TokenIssueOperation extends
if (tokenResponse == null) {
LOG.fine("No Token Validator has been found that can handle
this token");
-
+ } else if (validateTarget.getState().equals(STATE.INVALID)) {
+ throw new STSException("Incoming token is invalid",
STSException.REQUEST_FAILED);
} else if (validateTarget.getState().equals(STATE.VALID)) {
processValidToken(providerParameters, validateTarget,
tokenResponse);
} else {
