search

vinothair / openinfocard

Automatically exported from code.google.com/p/openinfocard
0 stars 0 forks source link

issuer and issuerPolicy not recognized by selector #3

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1.

According to http://www.identityblog.com/?page_id=412 the presence of 
an issuer or issuerPolicy URI fields (defined in section 4.2.1 and 4.2.2),
which point to a relying party STS and WS-Policy document, should change
the behavior of an identity selector (web client) to use WS-Trust, using
the protocol flow diagram 3.2 instead of the diagram 3.1. 

In the current source, SVN revision 37, I didn't see any obvious mention of
the issuerPolicy, and I don't think the issuer field is properly handled.
E.g., TokenIssuer.java#getToken(), if the requiredClaims and optionalClaims
fields are absent (as I'd assume in this case, since they'd be obtained
from WS-Policy rather than be in the HTML form), then the code throws all
the claims to the RP, rather than a token from WS-Trust.

Original issue reported on code.google.com by mark.w...@gmail.com on 21 Sep 2006 at 7:24

GoogleCodeExporter commented 8 years ago 
BTW I didn't see how to set the priority level of this, but I'm assuming this 
is low
priority as I don't know if there are any RPs out there which implement 
WS-Trust yet.

Original comment by mark.w...@gmail.com on 21 Sep 2006 at 7:27