dotnet / dotnet/wcf

`WsTrustChannelSecurityTokenProvider` should include default algorithms in RSTs

Open
#4,323 1 comment 0 reactions 1 assignee Claimed by @mconnew View on GitHub
WSFederation
Dominant language
C#
Stars
1.8k
Forks
576
Avg merge
6d 9h
Merged PRs (30d)
2

Description

When `WsTrustChannelSecurityTokenProvider` creates RSTs (in its `CreateWsTrustRequest` method), it does not set a variety of algorithm-related entities that are set in .NET Framework. In order to be as compatible with NetFx as possible, the following RST elements should be set (and possibly exposed to users for customization):

* `KeyWrapAlgorithm` (should default to http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p for Ws2007Federation scenarios)
* `EncryptWith` (should default to http://www.w3.org/2001/04/xmlenc#aes256-cbc for Ws2007Federation scenarios)
* `SignWith` (should default to http://www.w3.org/2000/09/xmldsig#hmac-sha1 for Ws2007Federation scenarios)
* `CanonicalizationAlgorithm` (should default to http://www.w3.org/2001/10/xml-exc-c14n# for Ws2007Federation scenarios)
* `EncryptionAlgorithm` (should default to http://www.w3.org/2001/04/xmlenc#aes256-cbc for Ws2007Federation scenarios)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.