[jira] [Created] (CXF-7160) Can not configure CXF http-jetty transport to handle X-Fowarded-for headers with Jetty 9

2016-12-02 Thread Joe Luo (JIRA)
Joe Luo created CXF-7160:


 Summary: Can not configure CXF http-jetty transport to handle 
X-Fowarded-for headers with Jetty 9
 Key: CXF-7160
 URL: https://issues.apache.org/jira/browse/CXF-7160
 Project: CXF
  Issue Type: Bug
  Components: Transports
Affects Versions: 3.1.5
Reporter: Joe Luo


With Jetty 8, we can configure CXF http-jetty transport to handle reverse proxy 
headers by simply setting "forwarded" to "true" to Jetty8 NIO 
SelectChannelConnector:
{code}




 
   
  
  

  
 

{code}

However, with Jetty 9, it is not possible to do so. Because in Jetty 9, the 
SelectChannelConnector was replaced by more generic purpose ServerConnector. 
And we can't configure ServerConnector since the old no-args constructor does 
not exist anymore in ServerConnector class and all new constructors require the 
org.eclipse.jetty.server.Server as an input parameter.

Jetty 9 documentation here talked about "X-Forward-for Configuration":
http://www.eclipse.org/jetty/documentation/9.4.x/configuring-connectors.html
We should configure HttpConfiguration with ForwardedRequestCustomizer in order 
to handle reverse proxy headers:
{code}

32768
8192
8192






{code}
However, CXF http-jetty transport schema is not in-sync with API changes in 
Jetty 9. There is no way to configure above with CXF http-jetty transport 
schema.

I can think of two solutions:
# Just like what we did in another JIRA:
https://issues.apache.org/jira/browse/CXF-5937 for servlet, we should also fix 
CXF http-jetty transport so we can optionally react to X-Forwarded headers;
# Change CXF http-jetty transport schema
http://cxf.apache.org/schemas/configuration/http-jetty.xsd
and related java code to allow configuring HttpConfiguration along with 
ForwardedRequestCustomizer in order to handle X-Fowarded-for headers.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Updated] (CXF-6604) Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt

2016-12-02 Thread Colm O hEigeartaigh (JIRA)

 [ 
https://issues.apache.org/jira/browse/CXF-6604?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Colm O hEigeartaigh updated CXF-6604:
-
Fix Version/s: 3.0.12
   3.1.9
   3.2.0

> Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt
> ---
>
> Key: CXF-6604
> URL: https://issues.apache.org/jira/browse/CXF-6604
> Project: CXF
>  Issue Type: Bug
>  Components: WS-* Components
>Affects Versions: 3.0.4
>Reporter: Andreas Vallen
>Assignee: Colm O hEigeartaigh
> Fix For: 3.2.0, 3.1.9, 3.0.12
>
>
> Our application sporadically experiences ClassCastExceptions in a CXF web 
> service client when performing a signature that is required by an 
> AssymetricBinding assertion of a WS-SecurityPolicy. See the stacktrace below.
> The fediz-based system is set-up as a relying party similarly to the one 
> found in the wsclientWebapp sample from the fediz distribution.
> The system is based on fediz 1.2.0, CXF 3.0.4, Windows Server 2008 R2, java 
> 8u51, tomcat 8.0.23.
> {code}
> 2015-09-15 14:42:12,171Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.c.w.s.w.p.AsymmetricBindingHandler   : Sign before encryption failed due 
> to : null
> 2015-09-15 14:42:12,187Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.cxf.phase.PhaseInterceptorChain  : Interceptor for 
> {http://service.ejb.ecs.birn.net/}ECSServiceService#{http://service.ejb.ecs.birn.net/}GetSaltCodes
>  has thrown exception, unwinding now
> org.apache.cxf.interceptor.Fault: null
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java:233)
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:110)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:201)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:114)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:101)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:516)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:425)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
> at 
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:138)
> at com.sun.proxy.$Proxy248.getSaltCodes(Unknown Source)
> at 
> net.sitranov.birn.unify.unifyweb.HomeResource.getSaltCodes(HomeResource.java:60)
> at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
> at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:181)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:97)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200)
> at 
> net.sitranov.birn.unify.unifyweb.AntiXSSInvoker.invoke(AntiXSSInvoker.java:58)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:99)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:251)
> at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> at 
> org.apa

[jira] [Commented] (CXF-6604) Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt

2016-12-02 Thread Colm O hEigeartaigh (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-6604?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15715129#comment-15715129
 ] 

Colm O hEigeartaigh commented on CXF-6604:
--

This may be an issue in Xerces, but I've managed to work around it by replacing 
the importNode call with some code that uses CXF's StaxUtils instead.

> Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt
> ---
>
> Key: CXF-6604
> URL: https://issues.apache.org/jira/browse/CXF-6604
> Project: CXF
>  Issue Type: Bug
>  Components: WS-* Components
>Affects Versions: 3.0.4
>Reporter: Andreas Vallen
>Assignee: Colm O hEigeartaigh
> Fix For: 3.2.0, 3.1.9, 3.0.12
>
>
> Our application sporadically experiences ClassCastExceptions in a CXF web 
> service client when performing a signature that is required by an 
> AssymetricBinding assertion of a WS-SecurityPolicy. See the stacktrace below.
> The fediz-based system is set-up as a relying party similarly to the one 
> found in the wsclientWebapp sample from the fediz distribution.
> The system is based on fediz 1.2.0, CXF 3.0.4, Windows Server 2008 R2, java 
> 8u51, tomcat 8.0.23.
> {code}
> 2015-09-15 14:42:12,171Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.c.w.s.w.p.AsymmetricBindingHandler   : Sign before encryption failed due 
> to : null
> 2015-09-15 14:42:12,187Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.cxf.phase.PhaseInterceptorChain  : Interceptor for 
> {http://service.ejb.ecs.birn.net/}ECSServiceService#{http://service.ejb.ecs.birn.net/}GetSaltCodes
>  has thrown exception, unwinding now
> org.apache.cxf.interceptor.Fault: null
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java:233)
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:110)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:201)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:114)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:101)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:516)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:425)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
> at 
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:138)
> at com.sun.proxy.$Proxy248.getSaltCodes(Unknown Source)
> at 
> net.sitranov.birn.unify.unifyweb.HomeResource.getSaltCodes(HomeResource.java:60)
> at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
> at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:181)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:97)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200)
> at 
> net.sitranov.birn.unify.unifyweb.AntiXSSInvoker.invoke(AntiXSSInvoker.java:58)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:99)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:251)
> at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.ja

[jira] [Reopened] (CXF-6604) Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt

2016-12-02 Thread Colm O hEigeartaigh (JIRA)

 [ 
https://issues.apache.org/jira/browse/CXF-6604?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Colm O hEigeartaigh reopened CXF-6604:
--

> Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt
> ---
>
> Key: CXF-6604
> URL: https://issues.apache.org/jira/browse/CXF-6604
> Project: CXF
>  Issue Type: Bug
>  Components: WS-* Components
>Affects Versions: 3.0.4
>Reporter: Andreas Vallen
>Assignee: Colm O hEigeartaigh
> Fix For: 3.2.0, 3.1.9, 3.0.12
>
>
> Our application sporadically experiences ClassCastExceptions in a CXF web 
> service client when performing a signature that is required by an 
> AssymetricBinding assertion of a WS-SecurityPolicy. See the stacktrace below.
> The fediz-based system is set-up as a relying party similarly to the one 
> found in the wsclientWebapp sample from the fediz distribution.
> The system is based on fediz 1.2.0, CXF 3.0.4, Windows Server 2008 R2, java 
> 8u51, tomcat 8.0.23.
> {code}
> 2015-09-15 14:42:12,171Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.c.w.s.w.p.AsymmetricBindingHandler   : Sign before encryption failed due 
> to : null
> 2015-09-15 14:42:12,187Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.cxf.phase.PhaseInterceptorChain  : Interceptor for 
> {http://service.ejb.ecs.birn.net/}ECSServiceService#{http://service.ejb.ecs.birn.net/}GetSaltCodes
>  has thrown exception, unwinding now
> org.apache.cxf.interceptor.Fault: null
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java:233)
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:110)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:201)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:114)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:101)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:516)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:425)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
> at 
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:138)
> at com.sun.proxy.$Proxy248.getSaltCodes(Unknown Source)
> at 
> net.sitranov.birn.unify.unifyweb.HomeResource.getSaltCodes(HomeResource.java:60)
> at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
> at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:181)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:97)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200)
> at 
> net.sitranov.birn.unify.unifyweb.AntiXSSInvoker.invoke(AntiXSSInvoker.java:58)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:99)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:251)
> at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> at 
> org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.j

[jira] [Resolved] (CXF-6604) Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt

2016-12-02 Thread Colm O hEigeartaigh (JIRA)

 [ 
https://issues.apache.org/jira/browse/CXF-6604?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Colm O hEigeartaigh resolved CXF-6604.
--
Resolution: Fixed

> Sporadic ClassCastException in AsymmetricBindingHandler#doSignBeforeEncrypt
> ---
>
> Key: CXF-6604
> URL: https://issues.apache.org/jira/browse/CXF-6604
> Project: CXF
>  Issue Type: Bug
>  Components: WS-* Components
>Affects Versions: 3.0.4
>Reporter: Andreas Vallen
>Assignee: Colm O hEigeartaigh
> Fix For: 3.2.0, 3.1.9, 3.0.12
>
>
> Our application sporadically experiences ClassCastExceptions in a CXF web 
> service client when performing a signature that is required by an 
> AssymetricBinding assertion of a WS-SecurityPolicy. See the stacktrace below.
> The fediz-based system is set-up as a relying party similarly to the one 
> found in the wsclientWebapp sample from the fediz distribution.
> The system is based on fediz 1.2.0, CXF 3.0.4, Windows Server 2008 R2, java 
> 8u51, tomcat 8.0.23.
> {code}
> 2015-09-15 14:42:12,171Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.c.w.s.w.p.AsymmetricBindingHandler   : Sign before encryption failed due 
> to : null
> 2015-09-15 14:42:12,187Z WARN  [http-apr-443-exec-30] 
> [michael.shu...@sitranov.com] [053e8a73-a64d-4212-b10a-4263c3f9d528] - 
> o.a.cxf.phase.PhaseInterceptorChain  : Interceptor for 
> {http://service.ejb.ecs.birn.net/}ECSServiceService#{http://service.ejb.ecs.birn.net/}GetSaltCodes
>  has thrown exception, unwinding now
> org.apache.cxf.interceptor.Fault: null
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.doSignBeforeEncrypt(AsymmetricBindingHandler.java:233)
> at 
> org.apache.cxf.ws.security.wss4j.policyhandlers.AsymmetricBindingHandler.handleBinding(AsymmetricBindingHandler.java:110)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessageInternal(PolicyBasedWSS4JOutInterceptor.java:201)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:114)
> at 
> org.apache.cxf.ws.security.wss4j.PolicyBasedWSS4JOutInterceptor$PolicyBasedWSS4JOutInterceptorInternal.handleMessage(PolicyBasedWSS4JOutInterceptor.java:101)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:516)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:425)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:326)
> at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:279)
> at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
> at 
> org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:138)
> at com.sun.proxy.$Proxy248.getSaltCodes(Unknown Source)
> at 
> net.sitranov.birn.unify.unifyweb.HomeResource.getSaltCodes(HomeResource.java:60)
> at sun.reflect.GeneratedMethodAccessor237.invoke(Unknown Source)
> at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:181)
> at 
> org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:97)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200)
> at 
> net.sitranov.birn.unify.unifyweb.AntiXSSInvoker.invoke(AntiXSSInvoker.java:58)
> at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:99)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
> at 
> org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
> at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)
> at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:251)
> at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> at 
> org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke

[jira] [Created] (CXF-7161) OIDC Dynamic Registration : NPE for implicit grant_types

2016-12-02 Thread gonzalad (JIRA)
gonzalad created CXF-7161:
-

 Summary: OIDC Dynamic Registration : NPE for implicit grant_types
 Key: CXF-7161
 URL: https://issues.apache.org/jira/browse/CXF-7161
 Project: CXF
  Issue Type: Bug
Affects Versions: 3.1.8
Reporter: gonzalad
Priority: Trivial


Im using OIDC Dynamic Reg to register an implicit flow client.

I get an NPE when I send this JSON :
{  
   "client_name":"IAM UI",
   "token_endpoint_auth_method":"client_secret_basic",
   "redirect_uris": [ "http://localhost:7070/callback"; ], 
   "grant_types":[  
  "implicit"
   ]
} 

The NPE is generated because clientSecret attribute of 
ClientRegistrationResponse is null.

Otherwise dynamic registration works fine with default grant_types.

{code}
syncope_1  | 2016-12-02 14:52:08,311 [http-apr-9080-exec-6] WARN  
org.apache.cxf.phase.PhaseInterceptorChain  - Interceptor for 
{http://idp.oidc.security.rs.cxf.apache.org/}OidcDynamicRegistrationService has 
thrown exception, unwinding now
syncope_1  | org.apache.cxf.interceptor.Fault
syncope_1  |at 
org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleWriteException(JAXRSOutInterceptor.java:391)
syncope_1  |at 
org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:266)
syncope_1  |at 
org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:120)
syncope_1  |at 
org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:83)
syncope_1  |at 
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
syncope_1  |at 
org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:83)
syncope_1  |at 
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
syncope_1  |at 
org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
syncope_1  |at 
org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:252)
syncope_1  |at 
org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
syncope_1  |at 
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
syncope_1  |at 
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
syncope_1  |at 
org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)
syncope_1  |at 
org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:299)
syncope_1  |at 
org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:218)
syncope_1  |at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
syncope_1  |at 
org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:274)
syncope_1  |at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
syncope_1  |at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
syncope_1  |at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
syncope_1  |at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
syncope_1  |at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
syncope_1  |at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
syncope_1  |at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
syncope_1  |at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
syncope_1  |at 
org.apache.cxf.fediz.tomcat8.FederationAuthenticator.invoke(FederationAuthenticator.java:183)
syncope_1  |at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
syncope_1  |at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
syncope_1  |at 
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:616)
syncope_1  |at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
syncope_1  |at 
org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:676)
syncope_1  |at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:509)
syncope_1  |at 
org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1104)
syncope_1  |at 
org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:684)
syncope_1  |at 
org.apache.tomcat.util.net.AprEndpoint$SocketWithOptionsProcessor.run(AprEndpoint.java:2445)
syncope_1  |at 
java.util.concurrent.ThreadPoolExecuto

[jira] [Commented] (CXF-7161) OIDC Dynamic Registration : NPE for implicit grant_types

2016-12-02 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-7161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15715508#comment-15715508
 ] 

ASF GitHub Bot commented on CXF-7161:
-

GitHub user gonzalad opened a pull request:

https://github.com/apache/cxf/pull/209

CXF-7161: OIDC dynreg : NPE for implicit grant

When clientSecret is null, we don't return anymore
clientSecret JSON node in the response (it's marked
as OPTIONAL in OIDC Connect Registration 1.0 specs).

You can merge this pull request into a Git repository by running:

$ git pull https://github.com/gonzalad/cxf CXF-7161

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/cxf/pull/209.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #209


commit df4c5f865eaf79aca45170fa757c5a8e7188e79e
Author: gonzalad 
Date:   2016-12-02T16:03:28Z

CXF-7161: OIDC dynreg : NPE for implicit grant

When clientSecret is null, we don't return anymore
clientSecret JSON node in the response (it's marked
as OPTIONAL in OIDC Connect Registration 1.0 specs).




> OIDC Dynamic Registration : NPE for implicit grant_types
> 
>
> Key: CXF-7161
> URL: https://issues.apache.org/jira/browse/CXF-7161
> Project: CXF
>  Issue Type: Bug
>Affects Versions: 3.1.8
>Reporter: gonzalad
>Priority: Trivial
>
> Im using OIDC Dynamic Reg to register an implicit flow client.
> I get an NPE when I send this JSON :
> {  
>"client_name":"IAM UI",
>"token_endpoint_auth_method":"client_secret_basic",
>"redirect_uris": [ "http://localhost:7070/callback"; ], 
>"grant_types":[  
>   "implicit"
>]
> } 
> The NPE is generated because clientSecret attribute of 
> ClientRegistrationResponse is null.
> Otherwise dynamic registration works fine with default grant_types.
> {code}
> syncope_1  | 2016-12-02 14:52:08,311 [http-apr-9080-exec-6] WARN  
> org.apache.cxf.phase.PhaseInterceptorChain  - Interceptor for 
> {http://idp.oidc.security.rs.cxf.apache.org/}OidcDynamicRegistrationService 
> has thrown exception, unwinding now
> syncope_1  | org.apache.cxf.interceptor.Fault
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleWriteException(JAXRSOutInterceptor.java:391)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:266)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:120)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> syncope_1  |  at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:252)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:299)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:218)
> syncope_1  |  at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:274)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.catalina.core.StandardWrapperValve.

[jira] [Commented] (CXF-7161) OIDC Dynamic Registration : NPE for implicit grant_types

2016-12-02 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-7161?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15715597#comment-15715597
 ] 

ASF GitHub Bot commented on CXF-7161:
-

Github user asfgit closed the pull request at:

https://github.com/apache/cxf/pull/209


> OIDC Dynamic Registration : NPE for implicit grant_types
> 
>
> Key: CXF-7161
> URL: https://issues.apache.org/jira/browse/CXF-7161
> Project: CXF
>  Issue Type: Bug
>Affects Versions: 3.1.8
>Reporter: gonzalad
>Priority: Trivial
>
> Im using OIDC Dynamic Reg to register an implicit flow client.
> I get an NPE when I send this JSON :
> {  
>"client_name":"IAM UI",
>"token_endpoint_auth_method":"client_secret_basic",
>"redirect_uris": [ "http://localhost:7070/callback"; ], 
>"grant_types":[  
>   "implicit"
>]
> } 
> The NPE is generated because clientSecret attribute of 
> ClientRegistrationResponse is null.
> Otherwise dynamic registration works fine with default grant_types.
> {code}
> syncope_1  | 2016-12-02 14:52:08,311 [http-apr-9080-exec-6] WARN  
> org.apache.cxf.phase.PhaseInterceptorChain  - Interceptor for 
> {http://idp.oidc.security.rs.cxf.apache.org/}OidcDynamicRegistrationService 
> has thrown exception, unwinding now
> syncope_1  | org.apache.cxf.interceptor.Fault
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleWriteException(JAXRSOutInterceptor.java:391)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:266)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:120)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> syncope_1  |  at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:252)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:299)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:218)
> syncope_1  |  at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:274)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
> syncope_1  |  at 
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
> syncope_1  |  at 
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
> syncope_1  |  at 
> org.apache.cxf.fediz.tomcat8.FederationAuthenticator.invoke(FederationAuthenticator.java:183)
> syncope_1  |  at 
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
> syncope_1  |  at 
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
> syncope_1  |  at 
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:616)
> syncope_1  |  at 
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
> syncope_1  |  at 
> org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:676)
> syncope_1  |  at 
> org.apache.catalina.connector.CoyoteAdapter.se

[jira] [Commented] (CXF-7156) java2ws-plugin - add portName as configuration option

2016-12-02 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-7156?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15715599#comment-15715599
 ] 

ASF GitHub Bot commented on CXF-7156:
-

Github user asfgit closed the pull request at:

https://github.com/apache/cxf/pull/208


> java2ws-plugin - add portName as configuration option
> -
>
> Key: CXF-7156
> URL: https://issues.apache.org/jira/browse/CXF-7156
> Project: CXF
>  Issue Type: Improvement
>  Components: Tooling
>Reporter: Stefaan Dutry
>Priority: Trivial
>  Labels: maven
>
> Using the {{java2ws-plugin}}, when you want to generate a WSDL, you currently 
> need to use the {{argline}} option to specify a portname.
> It would be easier if this was a seperate configuration parameter
> {code:xml|title=current configuration}
> 
> org.apache.cxf
> cxf-java2ws-plugin
> ${cxf.version}
> ...
> 
> 
> ...
> 
> ...
>   -portname MyPort
> 
> ...
> 
> 
> 
> {code}
> {code:xml|title=desired configuration}
> 
> org.apache.cxf
> cxf-java2ws-plugin
> ${cxf.version}
> ...
> 
> 
> ...
> 
> ...
> MyPort
> 
> ...
> 
> 
> 
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Resolved] (CXF-7161) OIDC Dynamic Registration : NPE for implicit grant_types

2016-12-02 Thread Sergey Beryozkin (JIRA)

 [ 
https://issues.apache.org/jira/browse/CXF-7161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sergey Beryozkin resolved CXF-7161.
---
   Resolution: Fixed
 Assignee: Sergey Beryozkin
Fix Version/s: 3.1.9
   3.2.0

Thanks for the patch

> OIDC Dynamic Registration : NPE for implicit grant_types
> 
>
> Key: CXF-7161
> URL: https://issues.apache.org/jira/browse/CXF-7161
> Project: CXF
>  Issue Type: Bug
>Affects Versions: 3.1.8
>Reporter: gonzalad
>Assignee: Sergey Beryozkin
>Priority: Trivial
> Fix For: 3.2.0, 3.1.9
>
>
> Im using OIDC Dynamic Reg to register an implicit flow client.
> I get an NPE when I send this JSON :
> {  
>"client_name":"IAM UI",
>"token_endpoint_auth_method":"client_secret_basic",
>"redirect_uris": [ "http://localhost:7070/callback"; ], 
>"grant_types":[  
>   "implicit"
>]
> } 
> The NPE is generated because clientSecret attribute of 
> ClientRegistrationResponse is null.
> Otherwise dynamic registration works fine with default grant_types.
> {code}
> syncope_1  | 2016-12-02 14:52:08,311 [http-apr-9080-exec-6] WARN  
> org.apache.cxf.phase.PhaseInterceptorChain  - Interceptor for 
> {http://idp.oidc.security.rs.cxf.apache.org/}OidcDynamicRegistrationService 
> has thrown exception, unwinding now
> syncope_1  | org.apache.cxf.interceptor.Fault
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleWriteException(JAXRSOutInterceptor.java:391)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:266)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:120)
> syncope_1  |  at 
> org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:83)
> syncope_1  |  at 
> org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
> syncope_1  |  at 
> org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
> syncope_1  |  at 
> org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:252)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:299)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:218)
> syncope_1  |  at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
> syncope_1  |  at 
> org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:274)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240)
> syncope_1  |  at 
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207)
> syncope_1  |  at 
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:212)
> syncope_1  |  at 
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
> syncope_1  |  at 
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
> syncope_1  |  at 
> org.apache.cxf.fediz.tomcat8.FederationAuthenticator.invoke(FederationAuthenticator.java:183)
> syncope_1  |  at 
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:141)
> syncope_1  |  at 
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
> syncope_1  |  at 
> org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:616)
> syncope_1  |  at 
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
> syncope_1  |  at 
> org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:676)
>

[jira] [Resolved] (CXF-7156) java2ws-plugin - add portName as configuration option

2016-12-02 Thread Daniel Kulp (JIRA)

 [ 
https://issues.apache.org/jira/browse/CXF-7156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Daniel Kulp resolved CXF-7156.
--
   Resolution: Fixed
 Assignee: Daniel Kulp
Fix Version/s: 3.1.9

> java2ws-plugin - add portName as configuration option
> -
>
> Key: CXF-7156
> URL: https://issues.apache.org/jira/browse/CXF-7156
> Project: CXF
>  Issue Type: Improvement
>  Components: Tooling
>Reporter: Stefaan Dutry
>Assignee: Daniel Kulp
>Priority: Trivial
>  Labels: maven
> Fix For: 3.1.9
>
>
> Using the {{java2ws-plugin}}, when you want to generate a WSDL, you currently 
> need to use the {{argline}} option to specify a portname.
> It would be easier if this was a seperate configuration parameter
> {code:xml|title=current configuration}
> 
> org.apache.cxf
> cxf-java2ws-plugin
> ${cxf.version}
> ...
> 
> 
> ...
> 
> ...
>   -portname MyPort
> 
> ...
> 
> 
> 
> {code}
> {code:xml|title=desired configuration}
> 
> org.apache.cxf
> cxf-java2ws-plugin
> ${cxf.version}
> ...
> 
> 
> ...
> 
> ...
> MyPort
> 
> ...
> 
> 
> 
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Commented] (CXF-7159) Schema name conflict in collect when DTO class declares XmlType namespace=http://www.w3.org/2001/XMLSchema

2016-12-02 Thread Daniel Kulp (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-7159?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15715623#comment-15715623
 ] 

Daniel Kulp commented on CXF-7159:
--

I would consider this change to be just as invalid.  You are adding types to a 
namespace that already has a specific schema defined for it and isn't in your 
control.  

>  Schema name conflict in collect when DTO class declares XmlType 
> namespace=http://www.w3.org/2001/XMLSchema
> ---
>
> Key: CXF-7159
> URL: https://issues.apache.org/jira/browse/CXF-7159
> Project: CXF
>  Issue Type: Bug
>  Components: JAX-WS Runtime
>Affects Versions: 2.6.1, 3.1.8
> Environment: JDK 8
>Reporter: Holger Sunke
> Attachments: schemaConflict.7z, schemaConflict_v2.7z
>
>
> I'm building my DTOs using wsdl2java and tried to set up a JaxWsProxyClient 
> or -Server which results in
> {quote}
> org.apache.ws.commons.schema.XmlSchemaException: Schema name conflict in 
> collection
>   at org.apache.ws.commons.schema.XmlSchema.(XmlSchema.java:126)
>   at org.apache.ws.commons.schema.XmlSchema.(XmlSchema.java:140)
>   at 
> org.apache.cxf.common.xmlschema.SchemaCollection.newXmlSchemaInCollection(SchemaCollection.java:194)
>   at 
> org.apache.cxf.jaxb.JAXBSchemaInitializer.createBridgeXsElement(JAXBSchemaInitializer.java:355)
>   at 
> org.apache.cxf.jaxb.JAXBSchemaInitializer.checkForExistence(JAXBSchemaInitializer.java:333)
>   at 
> org.apache.cxf.jaxb.JAXBSchemaInitializer.begin(JAXBSchemaInitializer.java:150)
>   at 
> org.apache.cxf.service.ServiceModelVisitor.visitOperation(ServiceModelVisitor.java:120)
>   at 
> org.apache.cxf.service.ServiceModelVisitor.walk(ServiceModelVisitor.java:74)
>   at 
> org.apache.cxf.jaxb.JAXBDataBinding.initialize(JAXBDataBinding.java:396)
>   at 
> org.apache.cxf.service.factory.AbstractServiceFactoryBean.initializeDataBindings(AbstractServiceFactoryBean.java:86)
>   at 
> org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean.buildServiceFromClass(ReflectionServiceFactoryBean.java:469)
>   at 
> org.apache.cxf.jaxws.support.JaxWsServiceFactoryBean.buildServiceFromClass(JaxWsServiceFactoryBean.java:696)
>   at 
> org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean.initializeServiceModel(ReflectionServiceFactoryBean.java:529)
>   at 
> org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean.create(ReflectionServiceFactoryBean.java:262)
>   at 
> org.apache.cxf.jaxws.support.JaxWsServiceFactoryBean.create(JaxWsServiceFactoryBean.java:199)
>   at 
> org.apache.cxf.frontend.AbstractWSDLBasedEndpointFactory.createEndpoint(AbstractWSDLBasedEndpointFactory.java:102)
>   at 
> org.apache.cxf.frontend.ClientFactoryBean.create(ClientFactoryBean.java:91)
>   at 
> org.apache.cxf.frontend.ClientProxyFactoryBean.create(ClientProxyFactoryBean.java:157)
>   at 
> org.apache.cxf.jaxws.JaxWsProxyFactoryBean.create(JaxWsProxyFactoryBean.java:142)
>   at 
> schemaConflict.TestSchemaConflict.testSchemaConflict(TestSchemaConflict.java:28)
> {quote}
> The offending DTO is an Exception object:
> {quote}
> @WebFault(name = "parameters", targetNamespace = 
> "http://www.w3.org/2001/XMLSchema";)
> public class SimpleFault extends Exception {
> private java.lang.String parameters;
> 
> {quote}
> Sources from WSDL:
> {quote}
> ...
>   
>   
>   
> ...
> 
> {quote}
> The offending Namespace http://www.w3.org/2001/XMLSchema is already added on 
> schema collection instantiation and thus a conflict is determined as soon as 
> the SimpleFault is hit on initialization.
> -I have devleoped a standalone test case you only need to extract and run 
> "mvn test" for reproducing this. How can I upload it?-



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Created] (CXF-7162) Inconsistent reading of formatted xml when validating schema

2016-12-02 Thread Rodrigo Merino (JIRA)
Rodrigo Merino created CXF-7162:
---

 Summary: Inconsistent reading of formatted xml when validating 
schema
 Key: CXF-7162
 URL: https://issues.apache.org/jira/browse/CXF-7162
 Project: CXF
  Issue Type: Bug
  Components: Core
Affects Versions: 3.1.8, 2.7.18
 Environment: All
Reporter: Rodrigo Merino


When calling StaxUtils.copy() with a source reader that is validating schema, 
the spaces between tags used for formatting the XML are not copied to the 
output.
This causes, when used, the soap body signature validation to fail when using 
schema validation.

I have already reported this to woodstox 
(https://github.com/FasterXML/woodstox/issues/29) but anyway, StaxUtils.copy() 
should be aware of both situations (CHARACTERS AND SPACES).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)


[jira] [Commented] (CXF-7162) Inconsistent reading of formatted xml when validating schema

2016-12-02 Thread ASF GitHub Bot (JIRA)

[ 
https://issues.apache.org/jira/browse/CXF-7162?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15717157#comment-15717157
 ] 

ASF GitHub Bot commented on CXF-7162:
-

GitHub user elrodro83 opened a pull request:

https://github.com/apache/cxf/pull/210

[CXF-7162] Inconsistent reading of formatted xml when validating schema



You can merge this pull request into a Git repository by running:

$ git pull https://github.com/elrodro83/cxf CXF-7162

Alternatively you can review and apply these changes as the patch at:

https://github.com/apache/cxf/pull/210.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

This closes #210


commit 25e33a49cfd1df608b0d0d85b1e8e8369761ca0c
Author: Rodrigo Merino 
Date:   2016-12-03T01:58:47Z

[CXF-7162] Inconsistent reading of formatted xml when validating schema




> Inconsistent reading of formatted xml when validating schema
> 
>
> Key: CXF-7162
> URL: https://issues.apache.org/jira/browse/CXF-7162
> Project: CXF
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 2.7.18, 3.1.8
> Environment: All
>Reporter: Rodrigo Merino
>
> When calling StaxUtils.copy() with a source reader that is validating schema, 
> the spaces between tags used for formatting the XML are not copied to the 
> output.
> This causes, when used, the soap body signature validation to fail when using 
> schema validation.
> I have already reported this to woodstox 
> (https://github.com/FasterXML/woodstox/issues/29) but anyway, 
> StaxUtils.copy() should be aware of both situations (CHARACTERS AND SPACES).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)