WSSecurity headers programmatically

[Rasheem Rashi]

Hello,

I'm trying to create SOAP Security Header programmatically, like here:

    
<soapenv:Header>
 <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis- open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
 <wsse:UsernameToken wsu:Id="UsernameToken-8479686" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
 <wsse:Username>wasadmin</wsse:Username>
 <wsse :-P	 assword Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">wasadmin</wsse :-P	 assword>
 <wsse:Nonce>IeEIv9gF18DjEeijQDnUfR==</wsse:Nonce>
 <wsu:Created>2008-06-06T10:31:39.556Z</wsu:Created>
 </wsse:UsernameToken>
</wsse:Security>

I'm trying to accomplish this with:

stub._setProperty(javax.xml.rpc.Stub.USERNAME_PROPERTY,"wasadmin");
stub._setProperty(javax.xml.rpc.Stub.PASSWORD_PROPERTY,"wasadmin");

Needless to say, I'm not succeeding. I'm using WebSphere 6.0. Would someone please post the code for this. Thanks a bunch already.

RR

[Ulf Dittmer]

The setProperty calls you mention are used for HTTP authentication, not WS-Sec authentication.

I've never tried to use WS-Sec programmatically; obviously, you could create those elements "by hand", and inject them into the message using SAAJ.

There's some (very short) mentioning of how to use WSS4J (the library most commonly used for WS-Sec) programmatically here.

[Freddy Wong]

Like what Ulf has said, you should consider of using WSS4J. The documentation isn't very good, but it shouldn't be too difficult to do it.
http://ws.apache.org/wss4j/

[Rasheem Rashi]

Thanks! I'll look into it.