OpenSAML 3 validators

[Cantor, Scott]

> I've recently upgraded Apache WSS4J to use OpenSAML 3.0. One change is
> that there appear to be no more "ValidatorSuites" in OpenSAML 3.0.

No, they got dumped early on. Chad never cared for the concept and they were gone by the time the work restarted.

> Previously, the code validated a received assertion against the relevant
> spec/schema validators. Is this no longer required by OpenSAML 3 or is there
> another way of doing it?

It was never *required*. Schema validation is still possible (with or without the library's help). Whether the code as a whole has issues or not with content that passes schema validation but violates the standard, I couldn't say. The main reason I built them in my version was to catch those kinds of issues and avoid a lot of extra null checking. Without them, checks for empty elements and the like have to be done somewhere.

-- Scott