[jboss-cvs] Picketlink SVN: r201 - federation/trunk/picketlink-bindings/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp.

[jboss-cvs-commits at lists.jboss.org]

Author: anil.saldhana at jboss.com
Date: 2010-04-08 17:45:21 -0400 (Thu, 08 Apr 2010)
New Revision: 201

Modified:
   federation/trunk/picketlink-bindings/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/IDPWebBrowserSSOValve.java
Log:
PLFED-58: do not ignore the flags

Modified: federation/trunk/picketlink-bindings/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/IDPWebBrowserSSOValve.java
===================================================================
--- federation/trunk/picketlink-bindings/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/IDPWebBrowserSSOValve.java	2010-03-26 10:58:49 UTC (rev 200)
+++ federation/trunk/picketlink-bindings/src/main/java/org/picketlink/identity/federation/bindings/tomcat/idp/IDPWebBrowserSSOValve.java	2010-04-08 21:45:21 UTC (rev 201)
@@ -516,8 +516,13 @@
                {
                   //Validate
                   SAML2Signature samlSignature = new SAML2Signature();
-                  PublicKey publicKey = keyManager.getValidatingKey(remoteAddress);
-                  isValid = samlSignature.validate(samlDocumentHolder.getSamlDocument(), publicKey);
+                  if( ignoreIncomingSignatures == false && signOutgoingMessages == true )
+                  {
+                     PublicKey publicKey = keyManager.getValidatingKey(remoteAddress);
+                     isValid = samlSignature.validate(samlDocumentHolder.getSamlDocument(), publicKey); 
+                  }
+                  else
+                     isValid = true;
                }
                else
                {