Apache WSS4J 1.6.6 released

Apache WSS4J 1.6.6 has been released and is available for download. WSS4J 1.6.6 contains an upgrade to use XML Security 1.5.2, the features of which are covered in a previous blog entry. Some significant fixes in the new release include:

• Support for a configurable clock skew setting when processing the "NotBefore" timestamp associated with a SAML Token. 
• Extending the maximum Time-To-Live setting associated with validating a Timestamp from the old value of 25 days.
• Support for populating SubjectConfirmationData attributes of a SAML Assertion.
• Support for a wider range of AuthenticationMethod values for SAML 1.1 Assertions.