Custom reference.uri is not honored by SignedXml.prototype.createReferences

[ergoithz]

Currently there is no way to customize the reference URI, even if SignedXml.prototype.addReference accepts it as argument, because is always overwritten by xpath id attribute.

https://github.com/yaronn/xml-crypto/blob/6e22854b1aeb4e59bd482a185826361a39872704/lib/signed-xml.js#L584

https://github.com/yaronn/xml-crypto/blob/6e22854b1aeb4e59bd482a185826361a39872704/lib/signed-xml.js#L443

[cjbarth]

@ergoithz , we'd welcome a PR with a test suite to address this limitation in xml-crypto. Would you consider contributing to the community to address this weakness?

[cjbarth]

@shunkica , this is the same id issues I flagged in #506 .

[shunkica]

@cjbarth I do not understand this issue.

The URI is just a pointer to the Id, so the issue as far as I can understand is that the user wants to customize an Id, not a "custom reference.uri"

In any case, one reference you create can result in multiple Reference elements within the XML, so I don't see how this would work.
If the user truly wants to customize the URI, they should insert Id elements in the XML they want to sign. That is the proper way to "customize an URI".

This confusion is another reason for #517

If I did not interpret this issue correctly please correct me.