[
https://issues.apache.org/jira/browse/CXF-4442?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13772986#comment-13772986
]
Colm O hEigeartaigh commented on CXF-4442:
------------------------------------------
A cache has been added for SAML2 Tokens containing a "OneTimeUse" Condition.
Documentation forthcoming. In addition, the IssuedTokenInterceptorProvider only
caches a issued token on the exchange if it does not have a OneTimeUse
Condition.
I disagree on the STS flag, as there is a difference between not allowing a
token to be renewed, and only allowing it to be used once.
Colm.
> Process OneTimeUse element of SAML assertion
> --------------------------------------------
>
> Key: CXF-4442
> URL: https://issues.apache.org/jira/browse/CXF-4442
> Project: CXF
> Issue Type: New Feature
> Components: WS-* Components
> Affects Versions: 2.6.1
> Reporter: Oliver Wulff
> Assignee: Colm O hEigeartaigh
> Fix For: 2.7.8
>
>
> The OneTimeUse element is specified in secton 2.5.1.5 of the SAML core
> specification:
> http://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
> CXF service endpoint doesn't process the OneTimeUse.
> Maybe the STS should set this flag if the following attribut is set:
> /wst:RequestSecurityToken/wst:Renewing/@Allow=False
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
