[
https://issues.apache.org/jira/browse/CXF-3827?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Anubhav Sharma updated CXF-3827:
--------------------------------
Attachment: 0009-fixed-failing-test.patch
0008-implemented-verification-of-proof-of-possession-for-.patch
The patch implements verification of proof of possession key while cancelling a
SCT. This verification can be switched on/off. The second patch fixes some
failing tests for Cancel usecase.
> Cancelling a SCT with STS is missing verification of proof of possession key
> ----------------------------------------------------------------------------
>
> Key: CXF-3827
> URL: https://issues.apache.org/jira/browse/CXF-3827
> Project: CXF
> Issue Type: Improvement
> Components: Services
> Affects Versions: 2.4.2
> Reporter: Anubhav Sharma
> Fix For: 2.4.3, 2.5
>
> Attachments:
> 0008-implemented-verification-of-proof-of-possession-for-.patch,
> 0009-fixed-failing-test.patch
>
>
> While cancelling a SCT with STS, the STS should verify the proof of
> possession key, most ideally in a configurable way where this verification
> can be switched on and off.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
