Thanks for looking into this again. I have created new issue as suggested.
Best Regards
Michael Mok
On 29 September 2017 at 06:12, Michael Mok <teatimej(a)gmail.com> wrote:
Hi there
In regards to issuee 4818 (
https://issues.jboss.org/browse/KEYCLOAK-4818),
we are still encountering issue with recognising dsig.
06:54:51,265 WARN [org.keycloak.saml.common] (default task-110) XML
External Entity switches are not supported. You may get XML injection
vulnerabilities.
09:19:31,939 ERROR [io.undertow.request] (default task-245) UT005023:
Exception handling request to /auth/realms/demo/login-actions/first-broker-login:
org.jboss.resteasy.spi.UnhandledExcept
ion: java.lang.RuntimeException: java.lang.RuntimeException:
com.ctc.wstx.exc.WstxParsingException: Undeclared namespace prefix "dsig"
at [row,col {unknown-source}]: [1,914]
at org.jboss.resteasy.core.ExceptionHandler.handleApplicationEx
ception(ExceptionHandler.java:78)
at org.jboss.resteasy.core.ExceptionHandler.handleException(Exc
eptionHandler.java:222)
at org.jboss.resteasy.core.SynchronousDispatcher.writeException
(SynchronousDispatcher.java:179)
at org.jboss.resteasy.core.SynchronousDispatcher.invoke(Synchro
nousDispatcher.java:422)
at org.jboss.resteasy.core.SynchronousDispatcher.invoke(Synchro
nousDispatcher.java:213)
at org.jboss.resteasy.plugins.server.servlet.ServletContainerDi
spatcher.service(ServletContainerDispatcher.java:228)
at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatc
her.service(HttpServletDispatcher.java:56)
at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatc
her.service(HttpServletDispatcher.java:51)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at io.undertow.servlet.handlers.ServletHandler.handleRequest(Se
rvletHandler.java:85)
at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.d
oFilter(FilterHandler.java:129)
at org.keycloak.services.filters.KeycloakSessionServletFilter.d
oFilter(KeycloakSessionServletFilter.java:90)