[prev in list] [next in list] [prev in thread] [next in thread] 

List:       xmlrpc-user
Subject:    [jira] [Created] (WSS-616) STRTransform TransformException when manually adding SAML Assertion via S
From:       "Russell Orf (JIRA)" <jira () apache ! org>
Date:       2017-10-17 16:49:00
Message-ID: JIRA.13110036.1508258910000.17720.1508258940143 () Atlassian ! JIRA
[Download RAW message or body]

Russell Orf created WSS-616:
-------------------------------

             Summary: STRTransform TransformException when manually adding SAML \
Assertion via SAMLCallback.setAssertionElement()  Key: WSS-616
                 URL: https://issues.apache.org/jira/browse/WSS-616
             Project: WSS4J
          Issue Type: Bug
          Components: WSS4J Core
    Affects Versions: 2.1.7
         Environment: Apache Tomcat 8.0.37
            Reporter: Russell Orf
            Assignee: Colm O hEigeartaigh


In Apache CXF v3.1.7, I have a JAX-WS web service client calling a service that \
requires a HolderOfKey SAML Assertion. The assertions are not from a \
SecureTokenService, so I am adding them manually in a SAMLCallbackHander, using the \
callback.setAssertionElement() method.

When invoking the client, the WSS4J framework is unable to compute the signature for \
the SecurityTokenReference header block, throwing the below error:

{{
javax.xml.crypto.dsig.XMLSignatureException: \
javax.xml.crypto.dsig.TransformException: \
org.apache.wss4j.common.ext.WSSecurityException: Referenced token \
"id-of-SAML-assertion" not found at \
org.apache.wss4j.dom.str.STRParserUtil.getTokenElement(StrParserUtil.java:314) at \
org.apache.wss4j.dom.transform.STRTransformUtil.dereferenceSTR(STRTransformUtil.java:98)
 at org.apache.wss4j.dom.transform.STRTransform.transformIt(STRTransform.java:195)}}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org


[prev in list] [next in list] [prev in thread] [next in thread]