[jira] [Commented] (FEDIZ-19) Single Sign Out

2012-09-24 Thread Oliver Wulff (JIRA)

[ 
https://issues.apache.org/jira/browse/FEDIZ-19?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13462112#comment-13462112
 ] 

Oliver Wulff commented on FEDIZ-19:
---

Raised FEDIZ-27 as this is the minimal functionality required to support the 
ADFS2.0 case. This JIRA for IDP only.

> Single Sign Out
> ---
>
> Key: FEDIZ-19
> URL: https://issues.apache.org/jira/browse/FEDIZ-19
> Project: CXF-Fediz
>  Issue Type: New Feature
>  Components: IDP
>Reporter: Romain Manni-Bucau
>
> The goal is to invalidate all sessions of "related" webapps with a single 
> action (button).

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Updated] (FEDIZ-19) Single Sign Out

2012-09-24 Thread Oliver Wulff (JIRA)

 [ 
https://issues.apache.org/jira/browse/FEDIZ-19?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Oliver Wulff updated FEDIZ-19:
--

Component/s: (was: Plugin)

> Single Sign Out
> ---
>
> Key: FEDIZ-19
> URL: https://issues.apache.org/jira/browse/FEDIZ-19
> Project: CXF-Fediz
>  Issue Type: New Feature
>  Components: IDP
>Reporter: Romain Manni-Bucau
>
> The goal is to invalidate all sessions of "related" webapps with a single 
> action (button).

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Created] (FEDIZ-27) Support signout/cleanup message in Fediz plugin

2012-09-24 Thread Oliver Wulff (JIRA)
Oliver Wulff created FEDIZ-27:
-

 Summary: Support signout/cleanup message in Fediz plugin
 Key: FEDIZ-27
 URL: https://issues.apache.org/jira/browse/FEDIZ-27
 Project: CXF-Fediz
  Issue Type: New Feature
  Components: Plugin
Reporter: Oliver Wulff


If the Relying Party receives a signout message, it invalidates the session. 
The signout action must be triggered at the IDP side.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference

2012-09-24 Thread Colm O hEigeartaigh (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461884#comment-13461884
 ] 

Colm O hEigeartaigh commented on CXF-4516:
--


What does your policy look like? It's kind of a moot point about the warning 
anyway, as we don't support RequireEmbeddedTokenReference at this point. So it 
you require this support then raise a new JIRA I guess outlining your use-case.

Colm.

> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
>  Issue Type: Improvement
>  Components: WS-* Components
>Affects Versions: 2.6.2
>Reporter: Chris Owens
>Priority: Minor
>  Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the 
> RequireReference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute 
> roadmap.  I believe what needs to happen is in 
> /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders;
>  add a new assertion builder class that would be picked up by 
> WSSecurityPolicyLoader; I can sort of guess by looking at the others what an 
> AssertionBuilder is supposed to do, but there is probably more to it. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference

2012-09-24 Thread Chris Owens (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461855#comment-13461855
 ] 

Chris Owens commented on CXF-4516:
--

Thank you.  Oddly, in one of my cases, RequireEmbeddedTokenReference raised a 
warning about there being no assertion builder for that assertion, whereas 
RequireIssuerSerialReference did not.   I'll reduce it to a clear test case; 
should I append that here or open a fresh issue?


> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
>  Issue Type: Improvement
>  Components: WS-* Components
>Affects Versions: 2.6.2
>Reporter: Chris Owens
>Priority: Minor
>  Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the 
> RequireReference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute 
> roadmap.  I believe what needs to happen is in 
> /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders;
>  add a new assertion builder class that would be picked up by 
> WSSecurityPolicyLoader; I can sort of guess by looking at the others what an 
> AssertionBuilder is supposed to do, but there is probably more to it. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


[jira] [Commented] (CXF-4516) Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference

2012-09-24 Thread Colm O hEigeartaigh (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-4516?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13461696#comment-13461696
 ] 

Colm O hEigeartaigh commented on CXF-4516:
--


There are no assertion builders for any of the Require* assertions, as they are 
already taken care of by the corresponding parent assertion. For example, 
RequireEmbeddedTokenReference is already set on the X509Token model by the 
X509TokenBuilder.

The problem is that no validation is done on the Require* assertions at the 
moment, so if you want to enforce it, I suggest looking into this instead. 

> Want WS-SecurityPolicy assertion builder for RequireEmbeddedTokenReference
> --
>
> Key: CXF-4516
> URL: https://issues.apache.org/jira/browse/CXF-4516
> Project: CXF
>  Issue Type: Improvement
>  Components: WS-* Components
>Affects Versions: 2.6.2
>Reporter: Chris Owens
>Priority: Minor
>  Labels: Policy, WS-SecurityPolicy
>
> There do not appear to be WS-SecurityPolicy assertion builders for any of the 
> RequireReference assertions, e.g. RequireEmbeddedTokenReference.
> I would be happy to start poking at this if someone would give me a 5 minute 
> roadmap.  I believe what needs to happen is in 
> /cxf/trunk/rt/ws/security/src/main/java/org/apache/cxf/ws/security/policy/builders;
>  add a new assertion builder class that would be picked up by 
> WSSecurityPolicyLoader; I can sort of guess by looking at the others what an 
> AssertionBuilder is supposed to do, but there is probably more to it. 

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira


Issues with Attachments: week of 2012-09-24

2012-09-24 Thread dkulp
 
CXF - Monday, September 24, 2012
 
  0 Issues with Attachments
 
  (sorted oldest to newest)