Repository: cxf Updated Branches: refs/heads/2.7.x-fixes 921883b26 -> 7c5682882
[CXF-5877] - SCT in a (SAML1.1 + SCT) scenario failing to renew ore reissue. Thanks to Freddy Exposito for the patch. Project: http://git-wip-us.apache.org/repos/asf/cxf/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/7c568288 Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/7c568288 Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/7c568288 Branch: refs/heads/2.7.x-fixes Commit: 7c5682882a8f663495a7ee6a17be4145aa5c765b Parents: 921883b Author: Colm O hEigeartaigh <[email protected]> Authored: Mon Jul 14 16:37:08 2014 +0100 Committer: Colm O hEigeartaigh <[email protected]> Committed: Mon Jul 14 16:38:11 2014 +0100 ---------------------------------------------------------------------- .../interceptors/SecureConversationTokenInterceptorProvider.java | 2 +- .../java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf/blob/7c568288/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/interceptors/SecureConversationTokenInterceptorProvider.java ---------------------------------------------------------------------- diff --git a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/interceptors/SecureConversationTokenInterceptorProvider.java b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/interceptors/SecureConversationTokenInterceptorProvider.java old mode 100644 new mode 100755 index 9671a36..a590ad6 --- a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/interceptors/SecureConversationTokenInterceptorProvider.java +++ b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/interceptors/SecureConversationTokenInterceptorProvider.java @@ -115,7 +115,7 @@ public class SecureConversationTokenInterceptorProvider extends AbstractPolicyIn if (v == null) { v = message.getContextualProperty(s); } - if (v != null) { + if (v != null && !s.equals(SecurityConstants.TOKEN) && !s.equals(SecurityConstants.TOKEN_ID)) { ctx.put(s, v); } } http://git-wip-us.apache.org/repos/asf/cxf/blob/7c568288/rt/ws/security/src/main/java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java ---------------------------------------------------------------------- diff --git a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java old mode 100644 new mode 100755 index 68b36b6..b46775a --- a/rt/ws/security/src/main/java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java +++ b/rt/ws/security/src/main/java/org/apache/cxf/ws/security/trust/AbstractSTSClient.java @@ -977,6 +977,7 @@ public abstract class AbstractSTSClient implements Configurable, InterceptorProv BindingOperationInfo boi = findOperation("/RST/Renew"); client.getRequestContext().putAll(ctx); + client.getRequestContext().remove(SecurityConstants.TOKEN_ID); if (isSecureConv) { client.getRequestContext().put(SoapBindingConstants.SOAP_ACTION, namespace + "/RST/SCT/Renew"); } else { @@ -1027,7 +1028,6 @@ public abstract class AbstractSTSClient implements Configurable, InterceptorProv } writer.writeStartElement("wst", "RenewTarget", namespace); - client.getRequestContext().put(SecurityConstants.TOKEN, tok); StaxUtils.copy(tok.getToken(), writer); writer.writeEndElement();
