[
https://issues.apache.org/jira/browse/CXF-5424?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Beryozkin resolved CXF-5424.
-----------------------------------
Resolution: Fixed
Fix Version/s: (was: 2.7.9)
Fixing for the 3.0.0 Milestone2 only, changes to 2.7.x are too sensitive
> JAX-RS Security Code can not validate signed SAML2 bearer assertions without
> KeyInfo
> ------------------------------------------------------------------------------------
>
> Key: CXF-5424
> URL: https://issues.apache.org/jira/browse/CXF-5424
> Project: CXF
> Issue Type: Bug
> Components: JAX-RS Security
> Reporter: Sergey Beryozkin
> Fix For: 3.0.0-milestone2
>
>
> Signed SAML2 Bearer assertions may not always have XML Signature KeyInfo
> elements available. The JAX-RS security code fails to validate such
> assertions but it should be able to *optionally* validate them without
> KeyInfo
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
