OpenSAML user discussion

["Scott Cantor" <>]

> Then there are some cases where an exception is thrown even if the message
> could possibly be decoded successfully.

Yes, but generally only after the Issuer identity has been saved in the
policy.

> I may want to repond with a <StatusResponse> message to some of these
> conditions, so it would be necessary to be able to extract its Issuer.
Would it
> be possible to reuse or extend the above mechanism for these conditions,
so that
> no exception was thrown in these cases - or am I missing something?

The Issuer information should usually be present even if an exception is
thrown, unless there was no way to determine it. This is what you originally
asked for, I think.

There may be some cases where the policy method has to be moved up higher,
as in the Destination check case, which is less efficient, but I can do it
if you point them out. I'll fix the POST decoder now.

> * MessageFlowRule: no instance of ReplayCache found in XMLToolingConfig
> (what about checking this at construction time?).

There's no guarantee it won't be destroyed later.

-- Scott