Thomas Papke created CXF-7864:
---------------------------------

             Summary: STS: Expires lifetime is ignored if no lifetime created 
was specified
                 Key: CXF-7864
                 URL: https://issues.apache.org/jira/browse/CXF-7864
             Project: CXF
          Issue Type: Bug
          Components: STS
    Affects Versions: 3.2.6
            Reporter: Thomas Papke


WS-trust define that a `/wst:RequestSecurityToken/wst:Lifetime` can be 
specified with only having `wsu:Expires`. In that case the creationTime shall 
be set to the current time. CXF simply ignore the lifetime if either expires or 
created is not present. (The same also for the other direction - lifetime can 
be also specified without expires, which is ignored as well)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to