[jira] Created: (CXF-2186) Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.

Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.
--------------------------------------------------------------------------------

                 Key: CXF-2186
                 URL: https://issues.apache.org/jira/browse/CXF-2186
             Project: CXF
          Issue Type: Improvement
          Components: WS-* Components
    Affects Versions: 2.1.3
            Reporter: Glenn Twiggs


The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.

See https://issues.apache.org/jira/browse/WSS-147 for more info.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/CXF-2186?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Glenn Twiggs updated CXF-2186:
------------------------------

    Description:
Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.

See https://issues.apache.org/jira/browse/WSS-147 for more info.

  was:
The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.

See https://issues.apache.org/jira/browse/WSS-147 for more info.

> Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.
> --------------------------------------------------------------------------------
>
>                 Key: CXF-2186
>                 URL: https://issues.apache.org/jira/browse/CXF-2186
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.1.3
>            Reporter: Glenn Twiggs
>
> Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.
> See https://issues.apache.org/jira/browse/WSS-147 for more info.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/CXF-2186?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh updated CXF-2186:
-------------------------------------

    Attachment: cxf-2186.patch


A patch for this issue.

> Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.
> --------------------------------------------------------------------------------
>
>                 Key: CXF-2186
>                 URL: https://issues.apache.org/jira/browse/CXF-2186
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.1.3
>            Reporter: Glenn Twiggs
>         Attachments: cxf-2186.patch
>
>
> Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.
> See https://issues.apache.org/jira/browse/WSS-147 for more info.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

    [ https://issues.apache.org/jira/browse/CXF-2186?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12725135#action_12725135 ]

Colm O hEigeartaigh edited comment on CXF-2186 at 6/29/09 4:40 AM:
-------------------------------------------------------------------


A patch for this issue. The patch requires WSS4J 1.5.8 (-SNAPSHOT), which will be available next month. I recommend upgrading the 2.1.x and 2.2.x branches to include this patch.

      was (Author: coheigea):
   
A patch for this issue.
 

> Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.
> --------------------------------------------------------------------------------
>
>                 Key: CXF-2186
>                 URL: https://issues.apache.org/jira/browse/CXF-2186
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.1.3
>            Reporter: Glenn Twiggs
>         Attachments: cxf-2186.patch
>
>
> Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.
> See https://issues.apache.org/jira/browse/WSS-147 for more info.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

     [ https://issues.apache.org/jira/browse/CXF-2186?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daniel Kulp resolved CXF-2186.
------------------------------

       Resolution: Fixed
    Fix Version/s: 2.2.3
                   2.1.6
                   2.0.12
         Assignee: Daniel Kulp

> Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.
> --------------------------------------------------------------------------------
>
>                 Key: CXF-2186
>                 URL: https://issues.apache.org/jira/browse/CXF-2186
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 2.1.3
>            Reporter: Glenn Twiggs
>            Assignee: Daniel Kulp
>             Fix For: 2.0.12, 2.1.6, 2.2.3
>
>         Attachments: cxf-2186.patch
>
>
> Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.
> See https://issues.apache.org/jira/browse/WSS-147 for more info.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.