CTT Security Username Password wrong error code

[johannwesely]

Hi in Security User Name Password there seems to bee also an wrong error code:

i changed Line 132 in AbstractIdentityValidator to throw new UaException(StatusCodes.Bad_IdentityTokenRejected);

but for case 012 it seems that the BadUserAccessDenied is overwritten by the new Bad_IdentityTokenrejected. But maybe im wrong? when i debug this i reach in AbstractUsernameIdentityValidator Line 147 where it throws BadUserAccessDenied in Method authenticateUsernameOrThrow but right after this i get to Line 132 in AbstractIdentityValidator.
Greetings Johann

[johannwesely]

In Session Services Session Change User this seems to be the same issue :

[johannwesely]

Hi Kevin, did you have the Time to check on this ?

[kevinherron]

Ah, I forgot about this.

I started on it here: dev/1.0...1.0-x509-identity

It passes the CTT tests, but needs some work to not re-use the server's certificate validator because it will end up imposing requirements on the identity certificate that are not necessary.

[kevinherron]

I'll try to work on it a little this week.