[JIRA] Resolved: (SIDP-559) Attribute queries are ignoring input designators.

[Scott Cantor (JIRA)]

     [ https://issues.shibboleth.net/jira/browse/SIDP-559?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor resolved SIDP-559.
-------------------------------

    Resolution: Fixed

http://svn.shibboleth.net/view/java-shib-common?rev=1039&view=rev

http://svn.shibboleth.net/view/java-shib-idp2?rev=3120&view=rev

Most actual implementation is in shib-common. Fixed a bug with how the AttributeQuery was being passed into that layer by the profile handler.

> Attribute queries are ignoring input designators.
> -------------------------------------------------
>
>                 Key: SIDP-559
>                 URL: https://issues.shibboleth.net/jira/browse/SIDP-559
>             Project: Shibboleth IdP 2 - Java
>          Issue Type: Improvement
>          Components: SAML 1, SAML 2
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>            Priority: Blocker
>             Fix For: 2.4.0
>
>          Time Spent: 2 hours
>  Remaining Estimate: 0 minutes
>
> The query profile handlers appear to be ignoring saml:AttributeDesignator and saml:Attribute elements if included in a query. The spec requires that we either honor those, or at least return an error if we don't support the full set of options.
> I would suggest we, at minimum, filter the final attribute names returned against the query, as that's relatively easy to do. If we don't want to support value matching, which is difficult in the general case, we could fail in the SAML 2 case if any AttributeValue elements are included.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira