[
https://issues.apache.org/jira/browse/CXF-4442?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh updated CXF-4442:
-------------------------------------
Fix Version/s: 2.7.8
> Process OneTimeUse element of SAML assertion
> --------------------------------------------
>
> Key: CXF-4442
> URL: https://issues.apache.org/jira/browse/CXF-4442
> Project: CXF
> Issue Type: New Feature
> Components: WS-* Components
> Affects Versions: 2.6.1
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Fix For: 2.7.8
>
>
> The OneTimeUse element is specified in secton 2.5.1.5 of the SAML core
> specification:
> http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
> CXF service endpoint doesn't process the OneTimeUse.
> Maybe the STS should set this flag if the following attribut is set:
> /wst:RequestSecurityToken/wst:Renewing/@Allow=False
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
