OpenSAML: AttributeStatementSchemaValidator.java doesn't consider encrypted attributes

[Brent Putman]

On 6/12/14 2:34 AM, Chandra Sekhar wrote:
> Hi All,
>
> org.opensaml.saml2.core.validator.AttributeStatementSchemaValidator.validateAttributes()
> doesn't considers EncryptedAttributes.
>
>
> Please comment on this.


It's a bug, feel free to file it in Jira against the v2 project (JOST).

Also, be aware that in the upcoming OpenSAML 3.0, the entire Validator
functionality has been removed from the library.  If you want to do
schema validation in the future with 3.0+, you should look at instead
performing schema validation on the DOM directly, using standard JAXP
mechanisms.  OpenSAML does have support for obtaining the required
Schema instances for the SAML schemas.

--Brent