[
https://issues.apache.org/jira/browse/CXF-5424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Beryozkin reopened CXF-5424:
-----------------------------------
> JAX-RS Security Code can not validate signed SAML2 bearer assertions without
> KeyInfo
> ------------------------------------------------------------------------------------
>
> Key: CXF-5424
> URL: https://issues.apache.org/jira/browse/CXF-5424
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS Security
> Reporter: Sergey Beryozkin
> Fix For: 3.0.0-milestone2, 2.7.9
>
>
> Signed SAML2 Bearer assertions may not always have XML Signature KeyInfo
> elements available. The JAX-RS security code fails to validate such
> assertions but it should be able to *optionally* validate them without
> KeyInfo
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
