SoapFault: No id attribute on element http://schemas.xmlsoap.org/soap/envelope/:Body (code wsse:InvalidSecurity)

Question

I'm new to SOAP and trying to connect to a SOAP server using PHP's built-in SoapClient. I am receiving this error for days now and didn't find any solution.

This is for a Linux Server. I've tried to include SoapHeaders with timestamps and add different parameters to the request, but still have not succeeded.

This is my code:

    $params = array(
        'X' => array(
            'Y' => '0',
            'Z' => '1',
            'Q' => array(
                'W' => array(
                    'E' => '1'
                )
            ),
            'R' => array(
                'T' => 3,
                'Y' => array(
                    'U' => 'x',
                    'I' => 'y'
                )
            ),
            'O' => array(
                'P' => '2'
            )
        ),
        'A' => array(
            'S' => array(
                'D' => 'H',
                'F' => 'J',
                'G' => 'K'
            )
        )
    );

    $client = new SoapClient( 'https://path-to-wsdl', array( 'trace' => 1 ) );

    $timestamp = gmdate("Y-m-d\TH:i:s\Z");
    $timestamp_expires = gmdate("Y-m-d\TH:i:s\Z", strtotime( '+1 hour' ) );


    $authHeader = new stdClass();
    $authHeader->Timestamp->Created = $timestamp;
    $authHeader->Timestamp->Expires = $timestamp_expires;
    $Headers[] = new SoapHeader('http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd', 'Security', $authHeader,TRUE);

    // $client->__setSoapHeaders($Headers);

    try
    {
        $response = $client->SoapFunction( $params );
    }
    catch( SoapFault $fault )
    {
        echo 'Request : <br/><xmp>',
        $client->__getLastRequest(),
        '</xmp><br/><br/> Error Message : <br/>',
        $fault->getMessage();

        die;
    }

I expect a response from the server, but receive this error code instead:

No id attribute on element http://schemas.xmlsoap.org/soap/envelope/:Body

Edit:

Code wsse:InvalidSecurity

May be this question will be helpful https://stackoverflow.com/questions/419563/what-does-wsseinvalidsecurity-mean — illia permiakov, Sep 13 '19 at 11:52
@JitendraYadav The WSDL file is private, but is used by other companies too (and working). But there is not a lot of documentation on it unfortunately — mbn, Sep 16 '19 at 07:18

score 0 · Answer 1 · edited Nov 13 '19 at 17:54

0

I believe there should be a certificate security (.pem file) associated with the SOAP API you are calling. Once you pass that certificate path along with SOAP request, it should work.

For adding certificate in your SOAP request, you just need modify your SOAP call like below code.

$client = new SoapClient( 'https://path-to-wsdl', array( 'trace' => 1, local_cert' => dirname(__FILE__) . '/certificatefile.pem'; ) );

edited Nov 13 '19 at 17:54

Dharman

30,962
25
85
135

answered Sep 19 '19 at 12:01

Kapil Yadav

650
1
5
29

Interesting, Could you be more specific with SOAP API URL to check if there are any additional requirements while calling the API? – Kapil Yadav Sep 19 '19 at 12:49

score 0 · Answer 2 · answered Aug 02 '22 at 06:30

I've tried using SoapClient from PHP and maybe it's just me but my experience has been absolutely horrible. You should give CURL a try. Also, here's the approach I use for WSDL requests:

Make it work on a client like Postman
Once you've got the correct format and headers, you can copy the generated PHP code from postman and focus on making it dynamic within your own environment
Print out your XML requests and compare it to working Postman requests

I know it's not the best approach, but if I had a dollar for every time I started debugging SoapClient requests and switched to CURL, I'd be a millionaire already

score -1 · Answer 3 · answered Sep 18 '19 at 06:15

It is possible that the authHeader should be a other than stdClass. Try to use this tool:

https://github.com/wsdl2phpgenerator/wsdl2phpgenerator

It will generate PHP classes out of your wsdl file. Using these classes it will be easier to follow the structure of how to build a request and what exactly you need to send.

SoapFault: No id attribute on element http://schemas.xmlsoap.org/soap/envelope/:Body (code wsse:InvalidSecurity)

3 Answers3