relying-party override and signResponses
powela at rpi.edu
Fri Apr 29 13:15:18 EDT 2016
I will file a bug report. I just wanted to make sure before pointing this
out to them. It seems better that they use ³true/false² so it would still
work if the check becomes less forgiving in the future...
>Date: Fri, 29 Apr 2016 16:55:14 +0000
>From: "Cantor, Scott" <cantor.2 at osu.edu>
>To: Shib Users <users at shibboleth.net>
>Subject: RE: relying-party override and signResponses
> <9846A6064BD102419D06814DD0D78DE1128E5B65 at CIO-TNC-D2MBX02.osuad.osu.edu>
>Content-Type: text/plain; charset="us-ascii"
>> p:signResponses="never" confused me as I though the new syntax was for
>> to be true or false. This example worked so I began to wonder and
>> discovered that this works
>It just accidentally has an effect. The type of that property is
>Predicate<ProfileRequestContext>, and we have converters that turn
>true/false into predicates.
>Can you please file a bug? We should be more explicit if we can and block
>use of other values.
>Being forgiving isn't strictly speaking an error but it's not helpful
More information about the users