Comments (7)
Hi @tonysgi
The toolkit tried to be compatible with java6 too.
It seems that we introduced a java7 dependency when used java.util.Objects to compare objects.
We should fix that and replace it with a solution that uses java.util.Objects when available, or a custom compare method.
Can you remove the imports and its use, instead of:
!Objects.equals(responseInResponseTo, requestId)
use
!responseInResponseTo.equals(requestId)
and let me know if there are more Java 7 dependencies?
from java-saml.
Thanks.
So I made the changes and the items that are left are:
HttpRequest.java
HttpRequest that = (HttpRequest) o; return Objects.equals(requestURL, that.requestURL) && Objects.equals(parameters, that.parameters);
and
public int hashCode() { return Objects.hash(requestURL, parameters); }
In Util.java in the validateXML method:
validator.setProperty(XMLConstants.ACCESS_EXTERNAL_DTD, ""); validator.setProperty(XMLConstants.ACCESS_EXTERNAL_SCHEMA, "");
The above has errors:
ACCESS_EXTERNAL_DTD cannot be resolved or is not a field
ACCESS_EXTERNAL_SCHEMA cannot be resolved or is not a field
from java-saml.
On HttpRequest.java you will need to replace the way requestURL is compared.
Related to the Objects.hash, maybe replace it by String.hashCode ?
Ty, it seems ACCESS_EXTERNAL_DTD and ACCESS_EXTERNAL_SCHEMA were introduced in Java 7.0 also.
from java-saml.
Hi tonysgi,
do you have the updated java 1.6 compatible java-saml library ? did you face any other issues? could you please share so that i can also use? thank you.
from java-saml.
Hello everyone,
Was anyone able to make a saml compatible with Java 1.6 by any chance?
Thanks
from java-saml.
@pitbulk Are you still willing to accept a PR that removes the Java 1.7 language features? If so, I'd like to finish this out.
from java-saml.
Just in case someone is interested, I had to compile java-saml under JDK 6 for an old WebSphere instance.
Fork is available at:
https://github.com/mguessan/java-saml
from java-saml.
Related Issues (20)
- add AssertionConsumerServiceIndex to Saml2Settings.java HOT 5
- https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLWOODSTOX-2928754 vulnerability HOT 3
- This project is currently not under active development HOT 20
- Access Denied! You do not have access to this application. Please contact your administrator. HOT 1
- Signing both Message and Assertion throws Invalid Signature Error HOT 3
- CVE-2022-40152 affecting com.fasterxml.woodstox:woodstox-core HOT 3
- Unsigned saml assertions are not rejected HOT 1
- Signature validation failed. SAML Response rejected HOT 1
- Jakarta supported version HOT 2
- Testcases seems to be failing HOT 2
- Signing both Message and Assertion throws Invalid Signature Error HOT 1
- SAML Response - EncryptionMethod with Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep" fails validation HOT 1
- Is onelogin saml toolkit supports the saml assertion decryption using the symmetric encryption method as well
- Preferred Alternative or Fork?
- Invalid_response Invalid SAML Response. Not match the saml-schema-protocol-2.0.xsd ( SAML Toolkit Java ) HOT 3
- Insecure/obsolete default signature algorithm HOT 1
- Please Help - clarification for using the SAML toolkit with existing Java Web Apps
- Links are broken for "How it Works" section
- Issues Javax EE to Jakarta EE using java-saml HOT 10
- SamlResponse.decryptAssertion, logical error
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from java-saml.