WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
Questions tagged [ws-security]
939 questions
9
votes
1 answer
Securing REST endpoint using spring security
I am trying to provide security to the REST endpoints. I am following instructions from this page. In my case I don't have view hence I haven't created controller to specify the views and haven't added viewResolver in my AppConfig.java
After…
Kaizar Laxmidhar
- 859
- 1
- 17
- 38
9
votes
1 answer
Working algorithm for PasswordDigest in WS-Security
I'm having trouble with WS-Security, and creating a nonce and password digest that is correct.
I am successfully using SoapUI to send data to an Oracle system. So I'm able to intercept SoapUI's call (change proxy to 127.0.0.1 port 8888 to use…
Matt Kemp
- 2,742
- 2
- 28
- 38
8
votes
1 answer
User authentication in SOAP Webservices
I made a question about JAX-WS, Authentication and Authorization - How to?; there was a discussion about security levels, and where to store user credentials.
Now after some conclusions, I want to try one of those scenarios:
SOAP web services -…
lpinto.eu
- 2,077
- 4
- 21
- 45
8
votes
5 answers
How do I build a secure webservice with .Net?
I need to build a simple webservice to get data in and out of a HR System over the Internet (it's a hosted solution). I am using IIS and ASP.Net with .Net 2.0.
Having looked into it, there are several ways of making the webservice secure - I am…
flytzen
- 7,348
- 5
- 38
- 54
8
votes
2 answers
Using WSSE plugin for Gsoap in C++/Linux
How can we implement WSSE plugin for Gsoap in C++/Linux ?
This link doesn't give all the information.
The problem is what do I have to include in my header file generated by WSDL , to make it wsse compatible so that soapcpp2 header.h generates…
Aditya Arora
- 89
- 1
- 3
8
votes
2 answers
load balancing WCF with wsHttpBinding and Message Security with client credentials type windows
We have got a normal WCF service which has a binding that looks like this:
Bravo11
- 898
- 2
- 11
- 24
8
votes
4 answers
How to create a soap client without WSDL
i need to visit a secure web service,
every request in the header need to carry a token.
i know the endpoint to the web service,
i also know how to create the token.
but i cannot see the WSDL for the webservice.
is there a way in C#, to create a…
jojo
- 13,583
- 35
- 90
- 123
8
votes
2 answers
Adding SOAP:HEADER username and password with WSE 3.0
I have successfully created a WS client that works correctly when NOT using authentication.
However, the server (WebSphere) now requires adding a ws-security username token, and I'm having a hard time doing this. The resulting SOAP message is…
csl
- 10,937
- 5
- 57
- 89
8
votes
2 answers
With C#, WCF SOAP consumer that uses WSSE plain text authentication?
I have a WCF SOAP consumer that is implemented by Visual Studio 2012 from a WSDL. The WSDL was generated by PeopleTools. The base object is of type System.ServiceModel.ClientBase.
I need the SOAP request to resemble:
Aren Cambre
- 6,540
- 9
- 30
- 36
8
votes
2 answers
Looking for java Library/API for implementing WS-Security for SOAP messages with Attachment(SwA)
I am implementing ebXML3.0 in java and looking for a java library/API I can use for Signing and Encryption of SOAP messages with attachment. Earlier I was using "Apache wss4j" but this seems to only support signing/encryption of SOAP Body (No…
user1842997
- 99
- 4
7
votes
2 answers
Validating a Signature of a SOAP Message
Everybody, Hello!
This is my request message:
Dmitry
- 3,028
- 6
- 44
- 66
7
votes
2 answers
WS-security (usernametoken) for CXF - encrypted passwords possible?
I'm trying to get together with CXF's WS-security implementation(usernametoken). I've done everything as said at http://cxf.apache.org/docs/ws-security.html. My PasswordCallbackHandler seems to be working, but what bothers me is a part:
if…
Jan
- 138
- 1
- 8
7
votes
1 answer
WS-Security not working with CXF
I' am trying to develop a WS-security enabled web service with Apache CXF. Tutorial that I am following is here. Unfortunately I am continuously getting the following error much to chagrin. I' am using Spring framework 3.0.5 and CXF 2.3.3 and also…
nash
- 705
- 4
- 14
- 21
7
votes
1 answer
How to get WS-Security certificate to be accepted by Java application
So I've been struggling with WS-Security for some time now, slowly making progress. First let me briefly describe my setup. I have Java application running in a tomcat, which offers a webservice endpoint (using Spring). I want incoming messages to…
VHristov
- 1,059
- 2
- 13
- 25
7
votes
1 answer
Creating secure web services with ColdFusion
I created an existing API with web services using ColdFusion that uses inline authentication but I'd like to secure it using some sort of authentication but I'm clueless where to start.
The web services are auto generated by ColdFusion by adding…
petron
- 81
- 6