If the client does not supply a valid XML document, currently the authorizationService returns a 500 with a stack trace.
The issue can be simply reproduced by doing a GET instead of a POST.
The org.opensaml.xml.parse.XMLParserException reported in the traceback should be caught, and a 400 returned.
If the client does not supply a valid XML document, currently the
authorizationServicereturns a 500 with a stack trace.The issue can be simply reproduced by doing a GET instead of a POST.
The
org.opensaml.xml.parse.XMLParserExceptionreported in the traceback should be caught, and a 400 returned.