Does assertion.getDOM() changes digest value of the Assertion token

[Gina Choi]

Hi All,

 org.w3c.dom.Element element = assertion.getDOM();

I injected element as actas token inside RequestSecurityToken(I am using
Metro and Metro takes DOM Element) and it is failing during digest
verification. So, I did following to test digest value change.

Right after I receive encoded SAML response token, I decoded it and
calculated digest value for Assertion token. I took out Signature part from
Assertion token when I calculate digest value.

To test if digest value get changed by assertion.getDOM(), I did following. I
calculated digest value for assertionStr with same method that I used
previous step and the value was different. Have anyone verified this?

			TransformerFactory transFactory =
TransformerFactory.newInstance();
			Transformer transformer =
transFactory.newTransformer();
			StringWriter buffer = new StringWriter();
	
transformer.setOutputProperty(OutputKeys.OMIT_XML_DECLARATION,
					"yes");
			transformer.transform(new
DOMSource(assertion.getDOM()),
					new StreamResult(buffer));
			String assertionStr = buffer.toString();

Thanks.

Gina