coheigea opened a new pull request, #3685: URL: https://github.com/apache/cxf/pull/3685
ClaimsAuthorizingInterceptor compared the NameFormat of every SAMLClaim with the configured format, so an attribute without a NameFormat, which is optional in SAML 2.0 (and a SAML 1.1 attribute without a namespace), failed with a NullPointerException instead of being matched. A missing NameFormat is now treated as the unspecified name format, the SAML 2.0 default and the default format of @Claim, and the claim names are compared null-safely. The claims of a @Claim annotation were ignored when a @Claims annotation was also present on the same method or class. Both are now applied. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
