WS-RM provider may try to send a CreateSequence message to the anonymous
endpoint in some cases
-----------------------------------------------------------------------------------------------
Key: CXF-3777
URL: https://issues.apache.org/jira/browse/CXF-3777
Project: CXF
Issue Type: Bug
Components: WS-* Components
Affects Versions: 2.4.2
Reporter: Aki Yoshida
Assignee: Aki Yoshida
Priority: Minor
Fix For: 2.4.3, 2.5
When a WS-RM client wrongly sends out a CreateSeqeunce message for twoway calls
without a create sequence offer and without a decoupled replyTo endpoint, the
WS-RM server/provider tries to send a CreateSequence message to the anonymous
endpoint (http://www.w3.org/2005/08/addressing/anonymous) and results in an
exception such as:
Caused by: org.apache.cxf.transport.http.HTTPException: HTTP response '401:
Authorization Required' when communicating with
http://www.w3.org/2005/08/addressing/anonymous
The server should not try to send a CreateSequence message to the anonymous
endpoint and instead should handle this situation by throwing a more
descriptive exception.
I'm fixing it to throw an RMException with the following more descriptive text
(which I add to the props file).
CREATE_SEQ_ANON_TARGET = It is not possible to send a create sequence request
to the anonymous address {0}
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
