Stack Overflow
Stack Overflow

Questions tagged [ws-security]

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

939 questions
0
votes
1 answer

Securing a web service that updates user details

The web service(using POST) allows the requester to update details of a user. The web service accepts the id of the user to be updated. I think accpeting the id of the request as a parameter is risky. Someone could create a post request and insert…
blue-sky
  • 51,962
  • 152
  • 427
  • 752
0
votes
1 answer

ws-security-policy not getting applied to request from spawned thread on Websphere

I have a web-service client running inside a web-app on Websphere 7 using ws-security-policy. When the client is invoked from a web-session or the main thread in a context-listener, the request gets encrypted as per policies. When called from a…
Paddy
  • 609
  • 7
  • 25
0
votes
1 answer

Is it possible to use Excel/Access to consume a SOAP based web service using WS-Security?

The extent of my ability is in vba and asp. I'm interested in consuming a SOAP web service from Excel or Access, mostly because it's easier for me. I've also got the wsdls for the web service which is using ws-security. Is this even possible? From…
Bazily
  • 1
  • 1
  • 1
0
votes
1 answer

Spring XWSS Message Signing

I am currently working on a client interface which connects to a third party web service. This 3rd party web service requires that all messages sent to them are signed with the client's private key. I am attempting to implement this using Spring's…
SamF
  • 255
  • 1
  • 3
  • 16
0
votes
0 answers

Incorrect Key for decrypting web service response

I am working on a WCF client to consume a third party web service over which I have no control. It works with a custom binding and WS Security. No app.config, all through code. I can successfully send requests and receive responses. However, it…
Alex Terreaux
  • 1,881
  • 5
  • 23
  • 39
0
votes
1 answer

CXF / XML-Signature: How to change the canonicalization algorithm?

I am writing a simple CXF client and server with a little bit of WS-Security (XML Signature). So far so good. ... outProps.put("signatureParts", "{Element}{" + WSU_NS + "}Timestamp;" +…
Frizz
  • 2,524
  • 6
  • 31
  • 45
0
votes
1 answer

.net call WS-Security enabled web service (created in java)

How to call a webservice (created in java) with ws security, they provided a certificate file , username & password, i tried using Web Services Enhancements (WSE) 3.0, Inherited the service proxy from …
Priyan R
  • 1,042
  • 1
  • 15
  • 24
0
votes
1 answer

configuring handlers :Axis2 ,Rampart

I currently have a handler to check if action given in SOAPAction field of HTTP header and the actual operation are the same.I have followed the Axis2 tutorial and I get this exception : Deployment exception for the handler And WSDoAllReceiver…
user3144176
  • 1
0
votes
1 answer

Signing All headers including Elements ReplyTo, To, MessageId and Action With Apache Axis2 and Rampart

I need to sign WS-Addressing elements in my soap message. Is it possible with apache axis2 ws-addresing and rampart? I've found this example - sample2 http://axis.apache.org/axis2/java/rampart/samples.html. But ws-addressing elements are not…
tomde
  • 103
  • 6
0
votes
1 answer

ERROR engine.AxisEngine: An unsupported signature or encryption algorithm was used (unsupported key transport encryption algorithm: No such algorithm

I am getting the below exception when I am calling the SecureStockQuoteProxy service with a proxy service. Here I have exposed this secured service as a REST API (which is unsecured). When I am calling the REST API, ESB throws the below…
Chanaka udaya
  • 5,134
  • 4
  • 27
  • 34
0
votes
1 answer

Why is the WCF wsHttpBinding Timestamp optional?

We have a WCF service that uses wsHttpBinding. The sample requests I generate include a timestamp which is validated by WCF for each request: 2013-11-02T16:58:24.575Z …
stuartd
  • 70,509
  • 14
  • 132
  • 163
0
votes
1 answer

Consume a soap web service using ws-security in PL/SQL

I am trying to consume a SOAP web service that uses WS-Security for authentication in PL/SQL however i am having a bad time since i do not find any good information about it. So i would like to request how can i consume a sopa ewb service using…
Winter
  • 1,896
  • 4
  • 32
  • 41
0
votes
1 answer

Oracle Web Services Security: AbstractMethodError in JDK 1.5, not 1.7

I am working with an Oracle 11g database (thus JDK 1.5) and trying to call a webservice with SOAP. I have to use ws-security, so I followed this documentation: http://docs.oracle.com/cd/E15523_01/security.1111/e10037/wss.htm I did everything in the…
user1898600
  • 53
  • 5
0
votes
1 answer

How to translate SOAP message to webServiceTemplate.sendSourceAndReceiveToResult of SPRING WS

I have a SOAP message call that is working on my soapUI
Chizbox
  • 109
  • 1
  • 1
  • 10
0
votes
1 answer

Specify parts of the header that have to be signed and/or encrypted in WCF with binding that support standards

Using Ws2007HttpBinding and securing the service, the WSDL file generated shows in the policy section that all the ws-addressing headers and the body will be signed, and that the body will be encrypted.
Philippe
  • 3,945
  • 3
  • 38
  • 56
1 2 3
…
62 63