Re: Exception when no "Conditions" element in assertions

Emmanuel,

Per the Liberty 1.2 schema specification, line 500, all IDPs must
include an <AudienceRestrictionCondition/> element. Unfortunately,
this is not enforced by the Liberty schema (or rather, their usage of
SAML schema). :)

I hope this helps,

D.


On Fri, 22 Oct 2004 19:51:28 +0200, Emmanuel Raviart
<[email protected]> wrote:
> We are currently using SourceID Liberty 2.0 beta as a Liberty Alliance
> reference platform to test and debug Lasso, a C library we are developing.
> 
> We are very impressed by the quality of SourceID, but we believe that we
> have found a small bug:
> 
> When using SourceID as a SP and Lasso as and IDP, the authentication
> assertions generated by Lasso don't contain any "Conditions" element.
> 
> If I understand correctly SAML 1.1 documentation, "Conditions" are
> optional in assertions. But SourceID Liberty generates a null pointer
> exception, when it process such an assertion.
> 
> To correct this, we added a test in VerifyAssertions.java, before line 109 :
> ConditionsType conditionsCopy =
> (ConditionsType)assertion.getConditions().copy();
> 
> so that the method "execute" returns immediately when getConditions()
> returns null.
>