[JIRA] (OSJ-346) Assertion validator is not checking IssueInstant

[Scott Cantor (Jira)]

Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue

OpenSAML - Java ( https://shibboleth.atlassian.net/browse/OSJ?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/OSJ-346?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 ) OSJ-346 ( https://shibboleth.atlassian.net/browse/OSJ-346?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 ) Assertion validator is not checking IssueInstant ( https://shibboleth.atlassian.net/browse/OSJ-346?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 )

Issue Type: Bug Affects Versions: 4.0.0, 4.0.1, 4.1.0, 4.1.1 Assignee: Brent Putman ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A97de0981-adc3-4044-95ed-131622fad81e ) Components: SAML 2 Profiles Created: 22/Dec/21 11:25 AM Fix Versions: 4.2.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )

I don't see any evidence the SAML 2 assertion validator code used by the proxy flow is checking IssueInstant. It is checking the various other Conditions and time bounds of course. Probably should be added into the "core" validator class.

( https://shibboleth.atlassian.net/browse/OSJ-346#add-comment?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/OSJ-346#add-comment?atlOrigin=eyJpIjoiNmViNTRjNDZhYTdjNGE3ZDk5MjRkYWFiMzhjM2RiY2UiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100187- sha1:76abc0a )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/ae7340f9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-c9ad0635-dce0-455f-a89b-34cd43b8d904
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/ae7340f9/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-b18e9494-81cb-4246-b496-a6930332093d
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/ae7340f9/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-a2efca59-7e60-416d-9f60-898b99be7f45
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/ae7340f9/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-4700ae15-dc5a-4e97-adc3-a520beb9db7f
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20211222/ae7340f9/attachment-0007.png>