eclipse-ee4j / eclipse-ee4j/metro-wsit

Rampart interop: SecureConversation session for session expired

Open
#339 0 comments 0 reactions 0 assignees View on GitHub
Component: secure-conversation ERR: Assignee metro2_2-waived metro2_3-waiver-request Priority: Major Type: Bug
Dominant language
Java
Stars
6
Forks
21
Avg merge
10h 2m
Merged PRs (30d)
1

Description

**The problem:**
Axis2 Rampart issued SecureConversation tokens expire after 5 minutes, however, it doesn't support SC token renewal. WSIT is unable to handle this situation even when renewExpiredSCT=false. Specifying Lifetime also doesn't work because Rampart ignores the client-supplied lifetime and uses its own (This is not illegal)

**What should happen:**
When SCT is expired and renewExpiredSCT is false, a new SCT should be requested and a new SC context should be established.

**What happens instead:**
WSIT throws a WSSecureConversationException: SecureConversation session for session Id: xxxx has expired.
It is then impossible to recover from this condition without restarting the application.
#### Environment
Client: WSIT 2.1
Server: Axis2 Rampart 1.5
WS-Policy: SymmetricBinding SecureConversation
#### Affected Versions
[2.1]

Source: [https://github.com/javaee/metro-wsit/issues/1539](https://github.com/javaee/metro-wsit/issues/1539)
Author: glassfishrobot

Contributor guide

Open the contributing guide

Research direction

No source file, test, or entry point is named. Start by reproducing the expired SecureConversation session with WSIT 2.1 and Axis2 Rampart 1.5, then trace the WSSecureConversationException path. Done means an expired SCT with renewExpiredSCT=false requests a new SCT and establishes a new SC context without restarting the application.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.