WS Security « Security « Spring Q&A





1. What to sign when signing a message with ws-security    stackoverflow.com

I am adding security to my web service and chose to sign the Timestamp and Token. While reading docs I found a lot of examples where they sign the Body of the ...

2. WSSecurityException not found when adding spring-ws security    stackoverflow.com

I followed the tutorial at: http://krams915.blogspot.com/2011/01/spring-ws-2-ws-security-using-wss4j.html but i get an exception:


14/08/2011 17:56:42 org.apache.catalina.core.StandardContext listenerStart
SEVERE: Exception sending context initialized event to listener instance of class     org.springframework.web.context.ContextLoaderListener
org.springframework.beans.factory.BeanCreationException: Error creating ...

3. MockWebServiceClient & WS-Security    forum.springsource.org

Hi, I've developed a Webservice using Spring-WS 2.0 and WSS4J interceptor and successfully tested it via SoapUI. Is there a way to use MockWebServiceClient along with WSS4J in order to create ...

4. Does WS-Security offer anything for user session tracking?    forum.springsource.org

Does WS-Security offer anything for user session tracking? Complete WS and Spring newbie here (just completed core spring training). We have a need to track user session information between WS method ...

5. WS-security || DaoAuthenticationProvider || handel DataAccessException    forum.springsource.org

WS-security || DaoAuthenticationProvider || handel DataAccessException Hi, i'have implemented i web service using spring-ws framework, and i have add wsSecurityInterceptor to all endpoits based on AcegiPlainTextPasswordValidationCallbackHandler.. i have costume the userService ...

6. Spring WS Security issue using Wss4jSecurityInterceptor with SimplePasswordValidation    forum.springsource.org

Spring WS Security issue using Wss4jSecurityInterceptor with SimplePasswordValidation Hi, I am trying to use Spring WebService security using Wss4jSecurityInterceptor with SimplePasswordValidationCallbackHandler. When I send the request through Soap UI, I am ...

7. JaxWsPortProxyFactoryBean and ws-security, please help me out    forum.springsource.org

JaxWsPortProxyFactoryBean and ws-security, please help me out Hi, I am developing a web-service client using JaxWsPortProxyFactoryBean. The server WSDL mentions that WS-Security username and password are required :

8. WS-Security docs in progress    forum.springsource.org

Hi, Obviously, you all want to try out the new WS-Security support that was added to Spring-WS in release 1.0 M1. However, security is no simple beast, and WS-Security is not ...

9. WS-Security handlers    forum.springsource.org

Sometimes something get only clearer if i have already post it. This two handlers are quite different ones. But i still didn't understand it right. The handler which implements the CallbackHandler ...





10. WS-Security    forum.springsource.org

Ahh! I did look at that, but not properly! I see all the bits of it now. Thanks. I will be trying this out over the next few days (when I ...

11. WS-Security with own siging logic    forum.springsource.org

WS-Security with own siging logic I have a backend service with the following services: - signing a message - validating a message signature I want (have to) to use the backend ...

12. Implementing WS-Security into SpringWS    forum.springsource.org

Implementing WS-Security into SpringWS Hey guys I know this is newbie issue but I have a quick question. I am trying to implement WS-Security via XWSS 2.0 and I get an ...

13. Basic ws-security Problems    forum.springsource.org

Basic ws-security Problems Hi I am building a simple spring 2.0 webservice application using ws-security with java 1.6 on a tomcat 6.xx server, i followed the examples in the spring ws-security ...

14. How to make WS security bidirectional?    forum.springsource.org

How to make WS security bidirectional? Hi, I'm developing a project that requires WS-Security and I'm facing the following problem. I'm succedeed in invoking the web service but now I'd like ...

15. testing ws-security    forum.springsource.org

testing ws-security i think i'm close to getting my first service secured with ws-security. i'm trying to test with soapUI. i'm getting this error when sending a request and i'm not ...

16. axis+Spring: how to implement ws-security?    forum.springsource.org

Hi, I have a demo system, the server side is developed with spring+axis while the client is spring.The client side request the service, exposed by server side. it works successfully. Now, ...





17. Looking for a good WS Security doc/example.    forum.springsource.org

Looking for a good WS Security doc/example. I am a RTFM guy, so I'll ask if there's a good sample application or reference guide out there I can look at, but ...

18. WS-Security    forum.springsource.org

Hi i read about the show stopper with Webspehere and was wondering whether this was still the case? I currently could get the spring-ws into a good project running on Weblogic ...

19. WS-Security Another Private Key    forum.springsource.org

I want to get private key in java class (without keystore) and then use them to sign the soap message. How I can make it?

20. WS-Security Problem    forum.springsource.org

Nov 19th, 2007, 08:10 AM #1 IanB View Profile View Forum Posts Private Message Member Join Date Nov 2007 Posts 40 WS-Security Problem Hi i am trying to secure the Holiday ...

21. RE: Spring WS security    forum.springsource.org

We are evaulating to use either Spring-WS or Axis2 for developing a web service. The web service will be also consumed by .NET clients. There is a concern that Spring-WS might ...

22. Spring-ws security    forum.springsource.org

I have configured spring-ws on my server side. Do I need to include security tokens in wsdl ?? How does client know what security info need to send?? My client is ...

23. WS-Security: Receiver requirement is not met    forum.springsource.org

WS-Security: Receiver requirement is not met Hey, Currenlty, I am trying the encrypt/decrypt the messages using WS-Security.The encryption/decryption at server end is working fine but the client is failing while decrypting ...

24. Integrating Spring WS with Axis (Security)    forum.springsource.org

Integrating Spring WS with Axis (Security) Hi cool Spring WS crowd! We are stuck to use Axis for some of our old web service client implementation. Hence the question ( Spring ...

25. WS-Security support    forum.springsource.org

WS-Security support Hi, In one of our projects, we're calling an external webservice. The requests to this webservice should be signed with the aid of WS-Security. The (synchronous) responses are not ...

26. Problem with ws-security with payload caching disabled    forum.springsource.org

Problem with ws-security with payload caching disabled Hello, I have a problem when using payloadcaching=false with axiom and a simple ws-security config:

27. WSS support in JAX-WS, JAXB RI based server using Spring Security    forum.springsource.org

WSS support in JAX-WS, JAXB RI based server using Spring Security Hello, I have a server that was generated WSDL-first using JAX-WS and JAXB RI. I would like to use Spring ...

28. WS-Security in which way?    forum.springsource.org

Hi, Im doing some research right now and the topic of my research is: How do Web Services Frameworks support the actual WS*-Standards (especially WS-Security)? The Spring Web Services Framework writes ...

29. Spring WS Security Signature Failure    forum.springsource.org

Mar 26th, 2009, 04:32 PM #1 john_anderson_ii View Profile View Forum Posts Private Message Junior Member Join Date Dec 2007 Posts 12 Spring WS Security Signature Failure Greetings, I'm trying to ...

30. security issue using ws servlet    forum.springsource.org

security issue using ws servlet hi, i'm working on project which uses the mvc servlet as dispatcher and i'm trying to use the ws servlet. Firstable, i changed openSessionInViewerInterceptor to the ...

31. WS Security Authentication with HttpHeaders    forum.springsource.org

WS Security Authentication with HttpHeaders Hi all, I am currently developing a webservice which is settled behind a loadbalancer. (http://www.apsis.ch/pound/) of course its not possible to communicate via https through the ...

32. MTOM and WS-Security    forum.springsource.org

33. WS Security on outgoing messages    forum.springsource.org

WS Security on outgoing messages I'm using SimpleWebServiceOutboundGateway, has anybody added WS Security headers to their outgoing messages? And if so how? I have a Wss4jSecurityInteceptor configured for use in authenticating ...

34. Spring WS Security and Java KeyStores    forum.springsource.org

Spring WS Security and Java KeyStores Hi, I am using Spring WS to develop Webservices. I am also using WS-Security using XwsSecurityInterceptor to secure my web services.I have configured Server KeyStore ...

35. JaxWsPortProxyFactoryBean and WS-Security    forum.springsource.org

JaxWsPortProxyFactoryBean and WS-Security Hello, i tried to get a UsernamePasswordToken from a webservice. But the Response has a MustUnderstand header and i get the following exception: org.springframework.remoting.jaxws.JaxWsSoapFaultE xception: MustUnderstand headers:[{http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security] are ...

36. WS-Security: Signature verification failed    forum.springsource.org

Sep 17th, 2009, 02:05 PM #1 EricM View Profile View Forum Posts Private Message Junior Member Join Date Sep 2009 Posts 4 WS-Security: Signature verification failed Hi, I'm new to the ...

37. SpringWS Security    forum.springsource.org

SpringWS Security Hi I am working on Spring WS Security using the below available configuration(XWSS). http://static.springsource.org/sprin.../security.html. So i have webservice person developed using spring with JAXB2.0,so i have an xsd called ...

38. SpringWS Security, MTOM and java.lang.OutOfMemoryError    forum.springsource.org

SpringWS Security, MTOM and java.lang.OutOfMemoryError I've got a web service which uses MTOM to receive file uploads and sits behind a Wss4jSecurityInterceptor object used to authenticate incoming requests. Authentication works fine, ...

39. Spring WS and Security - JAVA version    forum.springsource.org

I am trying to add security to my existing spring web services. I thought I read somewhere that there is a specific java jdk that must be used? Is that true ...

40. Spring-WS security    forum.springsource.org

Spring-WS security Hi, I am trying to implement Spring-WS security using Plain Text Username Authentication mechanism. I have got my security policy file defined as follows

41. spring ws and spring security 3.0    forum.springsource.org

spring ws and spring security 3.0 Is it possible to use spring ws 1.5.8, spring ws security 1.5.8, spring security 3.0.RC1 and spring 3.0.RC1 in one app ? I'm trying to ...

42. WS-I Basic Security Profile compliance    forum.springsource.org

43. WS Security Authorization    forum.springsource.org

I am implementing WS-Security using WSS4J and I'm trying to incorporate some support form of authorization. I'm using PayloadRootAnnotationMethodEndpointMapping for endpoints. My user is successfully authenticated. But now I want to ...

44. Same WS Operation mapped with and without security    forum.springsource.org

Same WS Operation mapped with and without security Hello everybody, I would like to ask your for advises as i've got problems developping a web service: I've got one operation call ...

45. Does Spring WS work with Spring Security 3.x and Spring 3.x?    forum.springsource.org

Hi, Has anyone gotten any version of spring-ws to play nicely with the spring 3.x stack (spring + spring security)? I'm very much interested to get this to work, but the ...

46. Issue getting spring-ws 1.5.9 working with spring-security 3.0.2 - java.lang.NoClassD    forum.springsource.org

May 14th, 2010, 09:48 AM #1 panksdmz View Profile View Forum Posts Private Message Junior Member Join Date Apr 2010 Posts 4 Issue getting spring-ws 1.5.9 working with spring-security 3.0.2 - ...