[Fediz Tomcat Plugin] EncryptedAssertion in SAML token

Hello, It seems Fediz tomcat plugin does not support EncryptedAssertion with SAML protocol. Is there any way to enable this ? it seems tokenDecryptionKey is only consumed by wsfed protocol. I will try to make a pull request, but seems harder than I though to support this. Arnaud

CXF and the ws security policy 1.2 draft standard

Hello everybody, I have to consume a SOAP service with CXF/JAX-WS, and it turns out it uses the draft ws security policy 1.2. CXF does not support this draft. I have no control over the provider of this service. Inspecting the WSDL, it turns out the service would be perfectly happy to use

Re: Problems with validatePolicies

Can you put together a test-case (either in github or by modifying one of the existing CXF ws-security systests)? Colm. On Thu, Jun 11, 2020 at 10:52 AM Johan Erlands wrote: > Hello list > > I am trying to get decryption and signature validation to work with my > servlet. I am using MTOM with

Re: Problems with validatePolicies

On torsdag 11 juni 2020 kl. 11:51:50 CEST Johan Erlands wrote: > I am trying to get decryption and signature validation to work with my > servlet. I am using MTOM with the streaming API. I looked into my configuration and I believe that I didn't use mtom or stax. Not sure if that has anything to

Problems with validatePolicies

Hello list I am trying to get decryption and signature validation to work with my servlet. I am using MTOM with the streaming API. I have run into a problem. CryptoCoverageUtil.checkHeaderCoverage is comparing different header elements object instances. They both contain the same XML.