[ 
https://issues.apache.org/jira/browse/CXF-9167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18028324#comment-18028324
 ] 

Colm O hEigeartaigh commented on CXF-9167:
------------------------------------------

For custom validators, they should be supported for the policy based approach 
as well via 
[https://github.com/apache/cxf/blob/a25cac6fef1adbb62d3511a9459bd2de78729c0f/rt/ws/security/src/main/java/org/apache/cxf/ws/security/wss4j/CXFRequestData.java#L39]

I don't think it's possible to plug in a custom processor for the policy 
approach. What is the error you see before the validator is hit? If it's a BSP 
error, you could try setting "ws-security.is-bsp-compliant" to false.

> Enable Custom Processor Injection in PolicyBasedWSS4JInInterceptor
> ------------------------------------------------------------------
>
>                 Key: CXF-9167
>                 URL: https://issues.apache.org/jira/browse/CXF-9167
>             Project: CXF
>          Issue Type: Improvement
>          Components: WS-* Components
>    Affects Versions: 4.1.3
>            Reporter: Guillaume Bouchon
>            Priority: Minor
>
> {*}Description{*}:
> Dear CXF team,
> To integrate with a legacy service, I need to implement a custom 
> {{Processor}} based on {{{}SignatureProcessor{}}}. According to the 
> documentation (WS-Security - Apache CXF), this requires configuring the 
> {{WSS4JInInterceptor}} with a custom processor via the 
> {{"wss4j.processor.map"}} property.
> This setup works correctly when using {{{}WSS4JInInterceptor(Map<String, 
> Object> properties){}}}.
> However, in my case, I am using {{{}PolicyBasedWSS4JInInterceptor{}}}, which 
> extends {{WSS4JInInterceptor}} but does *not* expose the constructor that 
> accepts a {{{}Map<String, Object>{}}}. As a result, it is currently 
> *impossible* to inject a custom processor when using 
> {{{}PolicyBasedWSS4JInInterceptor{}}}.
> I am aware of a similar request made in the past (CXF-3706), but after 
> reviewing the current codebase, I can confirm that there is still no viable 
> way to achieve this with {{{}PolicyBasedWSS4JInInterceptor{}}}.
> {*}Request{*}:
> Would it be possible to add a constructor to 
> {{PolicyBasedWSS4JInInterceptor}} that accepts a {{Map<String, Object>}} 
> (similar to {{{}WSS4JInInterceptor{}}}) to allow custom processor injection?
> Thank you for your consideration.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to