Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-862

Make future time to live value configurable

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.2.RC1
    • Component/s: Security
    • Labels:
      None

      Description

      Add a way to configure the future time to live value in the WSSConfig so that you can increase the tolerance when checking that the "Created" time in the timestamp is valid.

        Activity

        jaminh jaminh created issue -
        Hide
        jaminh jaminh added a comment -

        Forgot to mention this is in the Wss4jSecurityInterceptor.

        Show
        jaminh jaminh added a comment - Forgot to mention this is in the Wss4jSecurityInterceptor.
        arjen.poutsma Arjen Poutsma made changes -
        Field Original Value New Value
        Assignee Arjen Poutsma [ arjen.poutsma ]
        arjen.poutsma Arjen Poutsma made changes -
        Fix Version/s 2.1.5 [ 14349 ]
        Show
        arjen.poutsma Arjen Poutsma added a comment - Isn't this what you're looking for? http://docs.spring.io/spring-ws/site/apidocs/org/springframework/ws/soap/security/wss4j/Wss4jSecurityInterceptor.html#setValidationTimeToLive(int )
        arjen.poutsma Arjen Poutsma made changes -
        Status Open [ 1 ] Resolved [ 5 ]
        Resolution Invalid [ 6 ]
        Hide
        jaminh jaminh added a comment -

        That controls the tolerance for the Expired time but there is also a setting for controlling the tolerance for the Created time. See futureTimeToLive in http://ws.apache.org/wss4j/xref/org/apache/ws/security/validate/TimestampValidator.html

        Show
        jaminh jaminh added a comment - That controls the tolerance for the Expired time but there is also a setting for controlling the tolerance for the Created time. See futureTimeToLive in http://ws.apache.org/wss4j/xref/org/apache/ws/security/validate/TimestampValidator.html
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Ah, I misunderstood. Reopening.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Ah, I misunderstood. Reopening.
        arjen.poutsma Arjen Poutsma made changes -
        Resolution Invalid [ 6 ]
        Status Resolved [ 5 ] Reopened [ 4 ]
        Hide
        arjen.poutsma Arjen Poutsma added a comment -

        Fixed. Added a timeToLive property to the Wss4jSecurityInterceptor.

        Show
        arjen.poutsma Arjen Poutsma added a comment - Fixed. Added a timeToLive property to the Wss4jSecurityInterceptor.
        arjen.poutsma Arjen Poutsma made changes -
        Status Reopened [ 4 ] Resolved [ 5 ]
        Resolution Fixed [ 1 ]
        arjen.poutsma Arjen Poutsma made changes -
        Fix Version/s 2.2 [ 12850 ]
        Fix Version/s 2.1.5 [ 14349 ]
        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Resolved Resolved
        9d 16h 58m 1 Arjen Poutsma 31/Jan/14 3:52 AM
        Resolved Resolved Reopened Reopened
        2h 44m 1 Arjen Poutsma 31/Jan/14 6:37 AM
        Reopened Reopened Resolved Resolved
        2d 19h 30m 1 Arjen Poutsma 03/Feb/14 2:07 AM

          People

          • Assignee:
            arjen.poutsma Arjen Poutsma
            Reporter:
            jaminh jaminh
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: