OpenSAML user discussion

["Scott Cantor" <>]

> Thanks for looking into this!

Well, I really can't. It's not my code, and I've never even looked at WSS4J.
I doubt this is a bug per se, it's probably a question of faulty assumptions
between the libraries. But I don't know their code.

I don't see anything that would explain the error in what you posted, and I
can tell you that serializing the assertion in that manner does *nothing*.
You've parsed the assertion from a DOM (via stream) and so it's already got
a Document and a DOM captured. Calling toDOM() just returns that cached DOM
directly, so there's no reason that should make any difference by itself.

I would *imagine* the bug is a case of crossing documents between the
assertion's DOM and the Axis message, but that extra line of code wouldn't
have any effect on that.

You might try cloning the assertion and passing that to the rest of the
code. That drops the DOM out and leaves the raw data, but that also loses
any signature you might have.

-- Scott