auth10 / auth10-java Goto Github PK

Hi ,

I like your API very much and it worked with my custom STS (written with WIF c#). However, I use token encryption in C# side. I verified in Java side i get element . However, the api can not handle this. Is there any way to support this?

Thanks,
Arash

There are two issues both preventing a build from command line with maven.

mvn clean install

URLUTF8Encoder has unmappable characters in the javadoc (the copyright characters) when the build is initiated from linux which has default encoding of UTF-8. Replace these with the \u code or with (C) or delete them. The other option is to set the encoding in the compiler plugin like this:

<build>
    <plugins>
        <plugin>
            <groupId>org.apache.maven.plugins</groupId>
            <artifactId>maven-compiler-plugin</artifactId>
            <version>2.0.2</version>
            <configuration>
                <source>1.6</source>
                <target>1.6</target>
                <encoding>ISO-8859-1</encoding>
            </configuration>
        </plugin>
    </plugins>
</build>

There is one other problem with your project that prevents a proper build. You need to add xalan as a compile dependency (it already exists as a runtime dep but that is not enough):

    <!--  xalan  present as runtime dependency of opensaml but required for compile -->
    <dependency>
        <groupId>xalan</groupId>
        <artifactId>xalan</artifactId>
        <version>2.7.1</version>
    </dependency>
</dependencies>

servlet-api is stub for compilation purposes only and should not be deployed along with a webapp because the target container is expected to have an implementation of the servlet-api.

In WsFederationFilter.authenticateWithToken need to call request.getSession() so that a session has been created before any response.sendError is called. The reason is that this.writeSessionToken(httpRequest, principal) when called after response.sendError is called then provokes an IllegalStateException.

In pom.xml, the junit dependency should look like this so that junit is not carried with the artifact as a runtime dependency:

    <dependency>
        <groupId>junit</groupId>
        <artifactId>junit</artifactId>
        <version>4.10</version>
        <scope>test</scope>
    </dependency>