OpenSAML 3 validators

Colm O hEigeartaigh coheigea at apache.org
Thu Feb 12 11:06:56 EST 2015


Ok thanks for your reply. So when unmarshalling an assertion, is there any
code that checks to see if the required attributes etc. are present for the
particular element?

Colm.

On Thu, Feb 12, 2015 at 4:01 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > I've recently upgraded Apache WSS4J to use OpenSAML 3.0. One change is
> > that there appear to be no more "ValidatorSuites" in OpenSAML 3.0.
>
> No, they got dumped early on. Chad never cared for the concept and they
> were gone by the time the work restarted.
>
> > Previously, the code validated a received assertion against the relevant
> > spec/schema validators. Is this no longer required by OpenSAML 3 or is
> there
> > another way of doing it?
>
> It was never *required*. Schema validation is still possible (with or
> without the library's help). Whether the code as a whole has issues or not
> with content that passes schema validation but violates the standard, I
> couldn't say. The main reason I built them in my version was to catch those
> kinds of issues and avoid a lot of extra null checking. Without them,
> checks for empty elements and the like have to be done somewhere.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150212/630d8b0a/attachment.html 


More information about the dev mailing list