[
https://issues.apache.org/jira/browse/CXF-7864?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh resolved CXF-7864.
--------------------------------------
Resolution: Fixed
> STS: Expires lifetime is ignored if no lifetime created was specified
> ---------------------------------------------------------------------
>
> Key: CXF-7864
> URL: https://issues.apache.org/jira/browse/CXF-7864
> Project: CXF
> Issue Type: Bug
> Components: STS
> Affects Versions: 3.2.6
> Reporter: Thomas Papke
> Assignee: Colm O hEigeartaigh
> Priority: Major
> Fix For: 3.2.7
>
>
> WS-trust define that a `/wst:RequestSecurityToken/wst:Lifetime` can be
> specified with only having `wsu:Expires`. In that case the creationTime shall
> be set to the current time. CXF simply ignore the lifetime if either expires
> or created is not present. (The same also for the other direction - lifetime
> can be also specified without expires, which is ignored as well)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
