Questions tagged [ws-security]

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.

939 questions
5
votes
3 answers

Concepts involved in WS security?

Please can anyone explain briefly about concepts involved in WS security to protect soap from intermediate web services...
sun
  • 183
  • 1
  • 5
5
votes
0 answers

WCF server and WS-Security to Java client (SoapUI)

I'm trying to add WS-Security to an existing service I have, where said service is accessed over TLS, and I've mostly succeeded in testing it with SoapUI. However I'm having a problem with the response coming back; even though the response looks…
Chris J
  • 30,688
  • 6
  • 69
  • 111
5
votes
0 answers

Configuring GlassFish for WS-Security using UsernameToken

I am hosting a JAX-WS web service in GlassFish 3.0.1 (Metro stack). I would like to enable WS-Security on this web-service using UsernameTokens. How do I do this? I have not found very good documentation on this subject - much of it is on standalone…
Naresh
  • 23,937
  • 33
  • 132
  • 204
5
votes
2 answers

Send a SOAP request with WSSecurity in NodeJS

I'm trying to request this internal service that the team responsible for it said it needs both an Username + Password AND to be encrypted with a certificate. I thought of using this module node-soap and I found this in the documentation: 1-…
Victor Ferreira
  • 6,151
  • 13
  • 64
  • 120
5
votes
1 answer

Calling a secured Web Service in Java

I need to write a web service client to call a third party web service (SOAP based). The third party published a wsdl and the associated xsd files. The third party secure their website and services using .p12 certificates I used wsdl2java to…
Jamie McIlroy
  • 459
  • 2
  • 8
  • 19
5
votes
2 answers

WSHttpBinding TransportWithMessageCredential SecurityMode alters request

I am struggling with WCF binding configurations.I have third party service added as reference to my project. I was provided with some specifications. I need to use SOAP v1.2 so I figured that I need WSHttpBinding it's going to be https so I need…
Kapitán Mlíko
  • 4,498
  • 3
  • 43
  • 60
5
votes
3 answers

Java JAX-WS Service with WCF Client

Is it possible to create a WebService using JAX-WS, that whould then be consumed by a WCF client using such a binding?
Adalbert27
  • 73
  • 4
5
votes
1 answer

java - Apache CXF add signing certificate as BinarySecurityToken into WS-security header

I'm consuming WSDL and I need to sign the Timestamp and SOAP-body using my client certificate when making SOAP requests. My signing-certificate has to be represented as BinarySecurityToken in the message and be included in SOAP header like…
Oleg
  • 2,984
  • 8
  • 43
  • 71
5
votes
1 answer

Add Header to WCF RequestSecurityToken Message

I'm attempting to set up a client (Web Application) and service (WCF Service) that will communicate using a WSHttpBinding. It appears that in order to use this binding the client sends preliminary messages to set up the channel. Between the client…
hunda27
  • 59
  • 5
5
votes
1 answer

How to add wsse:Security, UsernameToken header to a SOAP request in ZSI, Python?

Is there a way to add the wsse:Security, UsernameToken header to the SOAP requests in ZSI, Python? I searched on the web, but couldn't find an answer.
Srikanth
  • 11,780
  • 23
  • 72
  • 92
5
votes
1 answer

Modify XML of CXF RequestSecurityToken before it gets encrypted

I'm calling a WCF service from a Java client using Apache CXF. The service is secured using an STS at another address. I've configured the service client to call out for the security token before invoking the main service and it works (it's trying…
Will Warren
  • 1,294
  • 15
  • 33
5
votes
3 answers

How to calculate wsse nonce?

I am getting an error while trying to send a soap request (soapCall) to the server. Fatal error: Uncaught SoapFault exception: [ns1:InvalidSecurity] An error was discovered processing the header I need to send the ws-security…
EXphpworld
  • 53
  • 1
  • 1
  • 6
5
votes
2 answers

Apache CXF and WS-Security - Password Callback

I have followed a mash up of a couple tutorials and neither too succesfully! I am trying to get Apache CXF and WS-Security to call back to my Spring Security authenticator. All is close to working but at tne moment I have a problem getting the…
Rob
  • 703
  • 1
  • 7
  • 18
5
votes
1 answer

Ruby and WS-Security

I'm having troubles finding good Ruby libraries that implement WS-Security. I've seen wss4r but have yet to use it (and the documentation is a bit light on it). What libraries do you use for this task, or is there a better alternative?
Chris Bunch
  • 87,773
  • 37
  • 126
  • 127
4
votes
2 answers

Web Service authentication in Java EE

When developing a Web service(Hospital Management System) using Java EE, is it necessary that for each Web Service call, it has to be checked that the user is logged in?? Which authentication method is the best JAAS, WS-Security, SAML, or a…
nkvp
  • 342
  • 1
  • 8
  • 15