I've recently faced the need to test a web service deployed in WSO2 ESB.
Nothing special, but this time the access method is via digest authentication.
At first I followed the solution proposed by +abdul basit in his blog, but the snipped code he shared doesn't include the creation of the Timestamp tag.
In order to obtain a complete WSSE security header, here the same code just a little modified:
Nothing special, but this time the access method is via digest authentication.
At first I followed the solution proposed by +abdul basit in his blog, but the snipped code he shared doesn't include the creation of the Timestamp tag.
In order to obtain a complete WSSE security header, here the same code just a little modified:
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import org.apache.ws.security.WSConstants; | |
| import org.apache.ws.security.message.WSSecHeader; | |
| import org.apache.ws.security.message.WSSecUsernameToken; | |
| import org.apache.ws.security.WSSConfig; | |
| import org.apache.xalan.processor.TransformerFactoryImpl; | |
| import org.apache.xerces.jaxp.DocumentBuilderFactoryImpl; | |
| import org.w3c.dom.Document; | |
| import org.w3c.dom.Element; | |
| import javax.xml.transform.OutputKeys; | |
| import javax.xml.transform.Transformer; | |
| import javax.xml.transform.dom.DOMSource; | |
| import javax.xml.transform.stream.StreamResult; | |
| import org.apache.ws.security.message.WSSecTimestamp; | |
| WSSecUsernameToken token = new WSSecUsernameToken(); | |
| token.setPasswordType(WSConstants.PASSWORD_DIGEST); | |
| //Set your username and password here | |
| token.setUserInfo("myUser", "myPass"); | |
| Document document = DocumentBuilderFactoryImpl.newInstance().newDocumentBuilder().newDocument(); | |
| document.appendChild(document.createElement("envelope")); | |
| WSSecHeader header = new WSSecHeader(); | |
| header.insertSecurityHeader(document); | |
| token.build(document, header); | |
| WSSecTimestamp timestamp = new WSSecTimestamp(); | |
| timestamp.setTimeToLive(3000); | |
| timestamp.prepare(document); | |
| timestamp.prependToHeader(header); | |
| Transformer transformer = TransformerFactoryImpl.newInstance().newTransformer(); | |
| transformer.setOutputProperty(OutputKeys.INDENT, "yes"); | |
| transformer.setOutputProperty(OutputKeys.OMIT_XML_DECLARATION, "yes"); | |
| StreamResult result = new StreamResult(new StringWriter()); | |
| DOMSource source = new DOMSource(header.getSecurityHeader()); | |
| transformer.transform(source, result); | |
| String xmlString = result.getWriter().toString(); | |
| vars.put("security", xmlString); | |
| //log.info(vars.get("security")); |
