[prev in list] [next in list] [prev in thread] [next in thread] 

List:       xmlrpc-user
Subject:    Re: SupportingTokens handling only one alternative
From:       Colm O hEigeartaigh <coheigea () apache ! org>
Date:       2014-10-09 9:31:01
Message-ID: CAB8XdGDTinBZ8Wn0nbHf5BEXJLMs7SdVQzgz51vcVFJktad+JA () mail ! gmail ! com
[Download RAW message or body]

Hi,

No, you can use policy alternatives at a higher level than the supporting
token for this. For example, something like:

<wsp:Policy wsu:Id="Combined">
        <wsp:ExactlyOne>
            <wsp:All>
                <wsp:Policy>
                    <wsp:ExactlyOne>
                        <wsp:All>
                            <sp:SupportingTokens>
                                <wsp:Policy>
                                    <sp:UsernameToken sp:IncludeToken="...">
                                        <wsp:Policy/>
                                    </sp:UsernameToken>
                                </wsp:Policy>
                            </sp:SupportingTokens>
                        </wsp:All>
                    </wsp:ExactlyOne>
                </wsp:Policy>
            </wsp:All>
            <wsp:All>
                <wsp:Policy>
                    <wsp:ExactlyOne>
                        <wsp:All>
                            <sp:SupportingTokens>
                                <wsp:Policy>
                                    <sp:SamlToken sp:IncludeToken="...">
                                        <wsp:Policy/>
                                    </sp:UsernameToken>
                                </wsp:Policy>
                            </sp:SupportingTokens>
                        </wsp:All>
                    </wsp:ExactlyOne>
                </wsp:Policy>
            </wsp:All>

Colm.

On Thu, Oct 9, 2014 at 8:46 AM, Khamphousone Bounkong <
bounkong.khamphousone@sopra.com> wrote:

>  Hello,
>
>
>
> I would like to know why the class
> *org.apache.wss4j.policy.model.SupportingTokens* is handling only one
> alternative.
>
> In fact, I'm trying to define a policy that can accept a UsernameToken or
> a SamlToken with CXF-STS.
>
> Do I need to define one web service for each token type ?
>
>
>
> Thank you very much.
>
>
>
> Best regards,
>
>
>
> Bounkong Khamphousone
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

[Attachment #3 (text/html)]

<div dir="ltr"><div>Hi,<br><br>No, you can use policy alternatives at a higher level \
than the supporting token for this. For example, something \
like:<br><br>&lt;wsp:Policy wsu:Id=&quot;Combined&quot;&gt;<br>        \
&lt;wsp:ExactlyOne&gt;<br>            &lt;wsp:All&gt;<br>                \
&lt;wsp:Policy&gt;<br>                    &lt;wsp:ExactlyOne&gt;<br>                  \
&lt;wsp:All&gt;<br>                            &lt;sp:SupportingTokens&gt;<br>        \
&lt;wsp:Policy&gt;<br>                                    &lt;sp:UsernameToken \
sp:IncludeToken=&quot;...&quot;&gt;<br>                                        \
&lt;wsp:Policy/&gt;<br>                                    \
&lt;/sp:UsernameToken&gt;<br>                                &lt;/wsp:Policy&gt;<br>  \
&lt;/sp:SupportingTokens&gt;<br>                        &lt;/wsp:All&gt;<br>          \
&lt;/wsp:ExactlyOne&gt;<br>                &lt;/wsp:Policy&gt;<br>            \
&lt;/wsp:All&gt;<br>            &lt;wsp:All&gt;<br>                \
&lt;wsp:Policy&gt;<br>                    &lt;wsp:ExactlyOne&gt;<br>                  \
&lt;wsp:All&gt;<br>                            &lt;sp:SupportingTokens&gt;<br>        \
&lt;wsp:Policy&gt;<br>                                    &lt;sp:SamlToken \
sp:IncludeToken=&quot;...&quot;&gt;<br>                                        \
&lt;wsp:Policy/&gt;<br>                                    \
&lt;/sp:UsernameToken&gt;<br>                                &lt;/wsp:Policy&gt;<br>  \
&lt;/sp:SupportingTokens&gt;<br>                        &lt;/wsp:All&gt;<br>          \
&lt;/wsp:ExactlyOne&gt;<br>                &lt;/wsp:Policy&gt;<br>            \
&lt;/wsp:All&gt;<br><br></div>Colm.<br></div><div class="gmail_extra"><br><div \
class="gmail_quote">On Thu, Oct 9, 2014 at 8:46 AM, Khamphousone Bounkong <span \
dir="ltr">&lt;<a href="mailto:bounkong.khamphousone@sopra.com" \
target="_blank">bounkong.khamphousone@sopra.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex">





<div link="blue" vlink="purple" lang="FR">
<div>
<p class="MsoNormal"><span lang="EN-US">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I would like to know why the class \
<b>org.apache.wss4j.policy.model.SupportingTokens</b> is handling only one \
alternative.<u></u><u></u></span></p> <p class="MsoNormal"><span lang="EN-US">In \
fact, I’m trying to define a policy that can accept a UsernameToken or a SamlToken \
with CXF-STS.<u></u><u></u></span></p> <p class="MsoNormal"><span lang="EN-US">Do I \
need to define one web service for each token type ?<u></u><u></u></span></p> <p \
class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p> <p \
class="MsoNormal"><span lang="EN-US">Thank you very much.<u></u><u></u></span></p> <p \
class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p> <p \
class="MsoNormal"><span lang="EN-US">Best regards,<span class="HOEnZb"><font \
color="#888888"><u></u><u></u></font></span></span></p><span class="HOEnZb"><font \
color="#888888"> <p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Bounkong \
Khamphousone<u></u><u></u></span></p> </font></span></div>
</div>

</blockquote></div><br></div><br clear="all"><br>-- <br>Colm O \
hEigeartaigh<br><br>Talend Community Coder<br><a href="http://coders.talend.com" \
target="_blank">http://coders.talend.com</a><br>



[prev in list] [next in list] [prev in thread] [next in thread]