Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-862

Make future time to live value configurable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.2.RC1
    • Component/s: Security
    • Labels:
      None

      Description

      Add a way to configure the future time to live value in the WSSConfig so that you can increase the tolerance when checking that the "Created" time in the timestamp is valid.

        Activity

        Hide
        jaminh jaminh added a comment -

        Forgot to mention this is in the Wss4jSecurityInterceptor.

        Show
        jaminh jaminh added a comment - Forgot to mention this is in the Wss4jSecurityInterceptor.
        Show
        arjen.poutsma Arjen Poutsma added a comment - Isn't this what you're looking for? http://docs.spring.io/spring-ws/site/apidocs/org/springframework/ws/soap/security/wss4j/Wss4jSecurityInterceptor.html#setValidationTimeToLive(int )
        Hide
        jaminh jaminh added a comment -

        That controls the tolerance for the Expired time but there is also a setting for controlling the tolerance for the Created time. See futureTimeToLive in http://ws.apache.org/wss4j/xref/org/apache/ws/security/validate/TimestampValidator.html

        Show
        jaminh jaminh added a comment - That controls the tolerance for the Expired time but there is also a setting for controlling the tolerance for the Created time. See futureTimeToLive in http://ws.apache.org/wss4j/xref/org/apache/ws/security/validate/TimestampValidator.html
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Ah, I misunderstood. Reopening.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Ah, I misunderstood. Reopening.
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Fixed. Added a timeToLive property to the Wss4jSecurityInterceptor.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Fixed. Added a timeToLive property to the Wss4jSecurityInterceptor.

          People

          • Assignee:
            arjen.poutsma Arjen Poutsma
            Reporter:
            jaminh jaminh
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: