SOAP Header Authentication!!!

[K Saleem]

Dear Friends,

I am trying to access webservices using java client. I am getting following error:

Fault Code = soap:Server

Fault String = Server was unable to process request. --> Authentication failed. Subscription ID is empty


The service provider providing clinet in .NET ,and our requirement is to use the same service( to find the distance betweent two zip code) in Java.

I have to set sessionID in the header , so the webservice authenticate me in order to use this service.

Please share any sample code, that is doing similar functionality, or kind of help to resolve this problem.


any help in this regard would be highly appreciated.


http://www.codebump.com/services/ZipCodeLookup.asmx?op=GetDistanceBetweenZipCodes
http://www.codebump.com/services/ZipCodeLookup.asmx?WSDL



********************** SOAP REQUEST ****************************************
POST /services/ZipCodeLookup.asmx HTTP/1.1
Host: www.codebump.com
Content-Type: text/xml; charset=utf-8
Content-Length: length
SOAPAction: "http://skats.net/services/GetDistanceBetweenZipCodes"

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns="http://skats.net/services/" xmlns:types="http://skats.net/services/encodedTypes" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header>
<tns:AuthenticationHeader>
<SessionID xsi:type="xsd:string">string</SessionID>
</tns:AuthenticationHeader>
</soap:Header>

<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<tns:GetDistanceBetweenZipCodes>
<zip1 xsi:type="xsd:string">string</zip1>
<zip2 xsi:type="xsd:string">string</zip2>
</tns:GetDistanceBetweenZipCodes>
</soap:Body>
</soap:Envelope>

****************************************************************************************

********************** SOAP Response ****************************************
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Content-Length: length

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns="http://skats.net/services/" xmlns:types="http://skats.net/services/encodedTypes" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<tns:GetDistanceBetweenZipCodesResponse>
<GetDistanceBetweenZipCodesResult xsi:type="xsd:float">float</GetDistanceBetweenZipCodesResult>
</tns:GetDistanceBetweenZipCodesResponse>
</soap:Body>
</soap:Envelope>
****************************************************************************************


Thanks,

KS

[Lasse Koskela]

Did you read the explanation on this page?

NOTE: This service requires a subscription.
You can register online using Subscriptions interface. There're several types of subscriptions available including a free subscription so you can continue using the web service without paying. When you subscribe you will be issued a subscriber ID that uniquely identify you. You must submit that ID with every request by setting AuthenticationHeader SOAP header. Consult WSDL for more information.

[K Saleem]

Yes, I have the subscription id and able to access the service using .NET client and a web interface.

KS

[Lasse Koskela]

Doh. Of course. Sorry...

You could use a JAX-RPC handler to add the necessary SOAP Header elements. Here's a sketch:

public class MySessionIdHandler implements javax.xml.rpc.handler.Handler
{
    ...
    public boolean handleRequest(MessageContext context) {
        try {
            SOAPMessageContext smc = (SOAPMessageContext) context;
            SOAPEnvelope envelope = smc.getMessage().getSOAPPart().getEnvelope();
            SOAPFactory soapFactory = SOAPFactory.newInstance();
 
            SOAPElement authHeaderElement = soapFactory.createElement("AuthenticationHeader", "nsprefix", "nsuri");
            SOAPElement sessionIdElement = soapFactory.createElement("SessionID", "nsprefix", "nsuri");
            sessionIdElement.addTextNode(MY_SESSION_ID);
            authHeaderElement.addChildElement(sessionIdElement);
 
            SOAPHeader soapHeader = envelope.addHeader();
            soapHeader.addChildElement(authHeaderElement);
        } catch (Exception ex) {
            ex.printStackTrace();
        }
        return true;
    }
    ...
}

(no guarantees -- I haven't even compiled it)

[K Saleem]

Thanks,

Here is the code we are using to call the service and geting the following error

Generated fault:

Fault Code = soap:Server

Fault String = Server was unable to process request. --> Authentication failed. Subscription ID is empty

Regards,
KS

  
 
import java.net.*;
import java.util.*;
import org.apache.soap.*;
import org.apache.soap.rpc.*;
import org.apache.soap.transport.http.*;
import org.apache.soap.util.xml.*;
 
public class ZipTest {
 
       public static void main(String[] args) {
            ZipTest zt = new ZipTest();
            try {
              zt.zipSoapServiceNew();
            } catch (Exception ex) {
                System.out.println("From Main: "+ ex.getMessage());
            }
        }
 
      public void zipSoapServiceNew() {
 
          String key = "c1edxHmdjG9Cyn83S3Rv6i6/xyEqIQIIZ8YHrjMo7utgW5nE2PqhsLsRht6pweg4weA+bif5BBX8SJvkhaS8N3K85Qi6Vsi0";
          URL url=null;
          try{
               url = new URL("http://codebump.com/services/zipcodelookup.asmx");
          }catch(MalformedURLException ee){
              System.out.println("ee==");
          }
 
         // Build the call.
          Call call = new Call();
 
           // Setting Request Header For Authentication
          Header hdr = new Header();
          QName qname = new QName("AuthenticationHeader", key);
          hdr.setAttribute(qname,key);
          call.setHeader(hdr);
 
          call.setTargetObjectURI("http://skats.net/services/");
          call.setMethodName("GetDistanceBetweenZipCodes");
          call.setEncodingStyleURI("http://schemas.xmlsoap.org/soap/encoding/");
          // Use our HTTP transport.
          SOAPHTTPConnection con= new SOAPHTTPConnection();
          call.setSOAPTransport(con);
 
          Vector params = new Vector();
          String zip1 = "27021";
          String zip2 = "27023";
          params.addElement(new Parameter("zip1", String.class, zip1, null));
          params.addElement(new Parameter("zip1", String.class, zip1, null));
          call.setParams(params);
 

          Response resp;
 
          try
          {
            resp = call.invoke(url, "http://skats.net/services/GetDistanceBetweenZipCodes");
          }
          catch (SOAPException e)
          {
            System.err.println("Caught SOAPException (" +
               e.getFaultCode() + "): " +
               e.getMessage());
            return;
          }
 
          // Check the response.
 
          if (!resp.generatedFault())
          {
            Parameter ret = resp.getReturnValue();
            Object value = ret.getValue();
 
            System.out.println(value != null ? "\n" + value : "I don't know.");
          }
          else
          {
            Fault fault = resp.getFault();
            System.err.println("Generated fault: ");
            System.out.println ("  Fault Code   = " + fault.getFaultCode());
            System.out.println ("  Fault String = " + fault.getFaultString());
          }
      }
}
 

[Lasse Koskela]

Can you compare the outgoing SOAP request from the .NET client and the Java client?

[K Saleem]

request is same, but we have no tool to compare or get the request format.
from either client..
but the proper format of the request as follows

Here the request format is defined.
http://www.codebump.com/services/ZipCodeLookup.asmx?op=GetDistanceBetweenZipCodes

POST /services/ZipCodeLookup.asmx HTTP/1.1
Host: <a href="http://www.codebump.com" target="_blank" rel="nofollow">www.codebump.com</a>
Content-Type: text/xml; charset=utf-8
Content-Length: length
SOAPAction: "http://skats.net/services/GetDistanceBetweenZipCodes"
 
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns="http://skats.net/services/" xmlns:types="http://skats.net/services/encodedTypes" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Header>
    <tns:AuthenticationHeader>
      <SessionID xsi:type="xsd:string">string</SessionID>
    </tns:AuthenticationHeader>
  </soap:Header>
  <soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
    <tns:GetDistanceBetweenZipCodes>
      <zip1 xsi:type="xsd:string">string</zip1>
      <zip2 xsi:type="xsd:string">string</zip2>
    </tns:GetDistanceBetweenZipCodes>
  </soap:Body>
</soap:Envelope>  

[Lasse Koskela]

Sure you can. You just need to start a proxy like Grinder's TCP Sniffer on your client machine and change the .NET client and Java client to use "http://localhost:xxxx/foo" instead of "http://codebump.com/services/zipcodelookup.asmx" where xxxx is the port number you configured your proxy to listen.

You'll be able to see exactly what your client is sending over the TCP connection and compare the requests sent by the different clients.
[ August 04, 2004: Message edited by: Lasse Koskela ]