[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2019-02-19 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16772178#comment-16772178 ] Colm O hEigeartaigh commented on FEDIZ-232: --- This will be fixed for the Spring +

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-26 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16699348#comment-16699348 ] ASF GitHub Bot commented on FEDIZ-232: -- coheigea commented on a change in pull reques

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-15 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16688229#comment-16688229 ] ASF GitHub Bot commented on FEDIZ-232: -- pedromfalves opened a new pull request #35: F

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-14 Thread Pedro Alves (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16686772#comment-16686772 ] Pedro Alves commented on FEDIZ-232: --- In our case the STS is signing the assertion and th

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-14 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16686575#comment-16686575 ] Colm O hEigeartaigh commented on FEDIZ-232: --- Why can't your IdP insert the InRes

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-14 Thread Pedro Alves (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16686472#comment-16686472 ] Pedro Alves commented on FEDIZ-232: --- 1 - Thanks for clarifying. I created FEDIZ-233 to c

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-13 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16685411#comment-16685411 ] Colm O hEigeartaigh commented on FEDIZ-232: --- # This is not really a bug as such

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-11-12 Thread Pedro Alves (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16684034#comment-16684034 ] Pedro Alves commented on FEDIZ-232: --- Thank you for your reply, [~coheigea] Additionally

[jira] [Commented] (FEDIZ-232) 'wctx' parameter mandatory but protocol does not require

2018-10-16 Thread Colm O hEigeartaigh (JIRA)
[ https://issues.apache.org/jira/browse/FEDIZ-232?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16651457#comment-16651457 ] Colm O hEigeartaigh commented on FEDIZ-232: --- Yes the CSRF style attacks are vali