https://github.com/apache/cxf-fediz
Mirror of Apache CXF
https://github.com/apache/cxf-fediz
cxf java library network-client network-server xml
Last synced: 6 months ago
JSON representation
Mirror of Apache CXF
- Host: GitHub
- URL: https://github.com/apache/cxf-fediz
- Owner: apache
- License: apache-2.0
- Created: 2014-03-08T08:00:07.000Z (over 11 years ago)
- Default Branch: main
- Last Pushed: 2024-12-09T12:53:33.000Z (6 months ago)
- Last Synced: 2024-12-10T00:42:07.924Z (6 months ago)
- Topics: cxf, java, library, network-client, network-server, xml
- Language: Java
- Size: 7.61 MB
- Stars: 24
- Watchers: 15
- Forks: 35
- Open Issues: 6
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
[](https://ci-builds.apache.org/job/CXF/job/CXF-Fediz/)
[](https://maven-badges.herokuapp.com/maven-central/org.apache.cxf.fediz/fediz)
[](https://api.securityscorecards.dev/projects/github.com/apache/cxf-fediz)
Welcome to Apache CXF Fediz!
============================
Fediz helps you secure your web applications by delegating security enforcement
to the underlying application server. With Fediz, authentication is externalized
from your web application to an identity provider installed as a dedicated server component.
The supported standard is WS-Federation 1.2 Passive Requestor Profile.
Fediz supports Claims Based Access Control beyond Role Based Access Control (RBAC).
Fediz includes the following feature set:
WS-Federation 1.1/1.2
SAML 1.1/2.0 Tokens
Custom token support
Publish WS-Federation Metadata document
Role information encoded as AttributeStatement in SAML 1.1/2.0 tokens
Claims information provided by FederationPrincipal interface
OpenId Connect (OIDC)
Export Notice
============================
This distribution includes cryptographic software. The country in
which you currently reside may have restrictions on the import,
possession, use, and/or re-export to another country, of
encryption software. BEFORE using any encryption software, please
check your country's laws, regulations and policies concerning the
import, possession, or use, and re-export of encryption software, to
see if this is permitted. See for more
information.
The U.S. Government Department of Commerce, Bureau of Industry and
Security (BIS), has classified this software as Export Commodity
Control Number (ECCN) 5D002.C.1, which includes information security
software using or performing cryptographic functions with asymmetric
algorithms. The form and manner of this Apache Software Foundation
distribution makes it eligible for export under the License Exception
ENC Technology Software Unrestricted (TSU) exception (see the BIS
Export Administration Regulations, Section 740.13) for both object
code and source code.
The following provides more details on the included cryptographic
software:
http://santuario.apache.org/
http://www.bouncycastle.org/
http://ws.apache.org/wss4j/
Getting Started
===============
For an Apache CXF Fediz source distribution, please read BUILDING.txt
in this folder for instructions on building Apache CXF Fediz.
For an Apache CXF Fediz binary distribution, please read release_notes.txt
for installation instructions and list of supported and unsupported
features.
Check the Fediz website for the latest news:
http://cxf.apache.org/fediz.html
If you need more help try talking to us on our mailing lists:
http://cxf.apache.org/mailing-lists.html
If you find any issues with Fediz, please submit reports with JIRA here:
https://issues.apache.org/jira/browse/FEDIZ
We welcome contributions, and encourage you to get involved in the CXF
community. If you'd like to learn more about how you can contribute, please
see:
http://cxf.apache.org/getting-involved.html
Thank you for using CXF Fediz!
The Apache CXF Team
http://cxf.apache.org/