WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
WS-Security is an extension to SOAP for applying security to web-services through XML Signature and XML Encryption.
Questions tagged [ws-security]
939 questions
0
votes
1 answer
How to do WSSE Authentication implementation in android java according to php part within webserver?
I use symfony2 for web server and use wsse authentication with x-wsse header.
The question actually is about which exact functions I should use in Java to give the same result as in PHP.
PHP part for header generation:
$nonce = substr( md5( uniqid(…
Yan Gao
- 181
- 1
- 3
- 11
0
votes
1 answer
How are messages encrypted and signed using WCF Message Security with an Anonymous Client
I am looking at a common security scenario - Message Security with an Anonymous Client which says integrity and confidentiality is achieved through "shared security context". The sample application for this scenario says "all application messages…
Ceco
- 1,586
- 3
- 16
- 23
0
votes
1 answer
Possible unicode interop issue between WCF and Java EE when using signed messages over HTTPS?
I'm using the custom binding configuration below to sign the SOAP message with a certificate over HTTPS:
System.ServiceModel.Channels.AsymmetricSecurityBindingElement asbe = new AsymmetricSecurityBindingElement();
…
leypascua
- 725
- 1
- 5
- 13
0
votes
2 answers
JAX-RS: Authenticate with multiple principals (more than just username)
Using a Jersey service, what would be the most elegant method to authenticate a user with more than just username and password? say, a Business Id, and username as the Principals, and password as the only Credential.
I have a postgres DB with a…
Alon Amir
- 4,913
- 9
- 47
- 86
0
votes
1 answer
Error setting up ws-security (Apache Rampart/C) for UsernameToken authentication and NO encryption
I'm having problems setting up AXIS2/C web services (axis2/c 1.6.0) with Apache Rampart/C 1.3.0 (not to be confused with their java counterparts, aka just "axis2" and "rampart") for UsernameToken authentication. I want NO encryption because I'm…
Rick Garcia
- 167
- 1
- 4
0
votes
1 answer
Client classes generated by cxf-codegen-plugin:wsdl2java missing Policies attached in WSDL
I used cxf-codegen-plugin to generate client classes:
org.apache.cxf
cxf-codegen-plugin
2.7.4
…
whz-pa
- 25
- 4
0
votes
0 answers
HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] Security
All,I have a stand-alone ePayment service which is implemented with an asp.net web service for my order management system , and I am using the CyberSource as the payment service, The responsiblity of the web service is the interface to intergate the…
Joe.wang
- 11,537
- 25
- 103
- 180
0
votes
0 answers
Consume a WebService with SoapClient using a local_cert
Hello all :) I have an Axis2 WebService with incoming request signing enabled (Rampart module using Signature in InflowSecurity setting). I'm trying to call it in PHP, using a local certificate:
$client = new SoapClient(
…
BenoitParis
- 3,166
- 4
- 29
- 56
0
votes
1 answer
Unable to invoke web service with security
I have crated a CXF JAXWS Service as below.
I have provided a custom UserNameToken validator and a callback handler.
But this is not working. It throws an error everytime.
user1760178
- 6,277
- 5
- 27
- 57
0
votes
1 answer
SAMLToken (Signed) request failing because of WS Policy
I am implementing alternate authentication using UsernameToken or SAMLToken (Signed). I have configured below policy in my wsdl:
…
Sumit
- 706
- 1
- 8
- 16
0
votes
0 answers
PHP implementation of SOAP ws-addressing and ws-security
I tried to call in PHP a SOAP webservice implemented in .Net using severals "extensions" like ws-security and ws-addressing.
I used wsf/php (wso2), based on rampart and axis2, and I did not succed. We asked another dev team which had developped…
Cédric Girard
- 3,358
- 7
- 37
- 52
0
votes
1 answer
Use gSOAP for VS 2003/C++ access to SOAP Web Service with WS-Security?
We have an upcoming project to allow an old platform that's only extensible with C++ / VS 2003 to call a SOAP-based web service that uses WS-Security.
My Google research indicates that gSOAP could be the best way to go.
I'm looking for validation…
Eric J.
- 147,927
- 63
- 340
- 553
0
votes
1 answer
java.lang.ClassNotFoundException when handling SOAP request with CXF on JBOSS
We have a web service implemented with CXF and runs on JBoss 5.1.
Recently we've upgraded the CXF from 2.3.1 to 2.5.9.
We have also added WS-Policy to our service so the soap request that comes from the client includes a x509 certificate…
Aaron
- 2,236
- 1
- 16
- 28
0
votes
1 answer
How to make a php WSSoapClient call in PHP - example
Can someone provide me a PHP example of how to make a WSSoapClient call to a wsdl webservice at https://gateway2.pagosonline.net/ws/WebServicesClientesUT?wsdl .
I have looked everywhere for code examples and could not find how to call this. i see…
jacksprater
- 27
- 1
- 4
0
votes
2 answers
UserNamePasswordValidator and Session Management
I'm using WCF custom Validator with HTTPS (.NET 4.5). Validate on success returns Customer object which I would like to use later. Currently I'm able to do it with Static variables which I like to avoid if possible. I tried to use HttpContext which…
Manish Jain
- 9,569
- 5
- 39
- 44