Hi Nandana,

You are correct, the SOAP response doesn't contain the wsse:Security header.


This is the SOAP response:

<?xml version='1.0' encoding='utf-8'?>
<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope";>
  <soapenv:Body>
    <wst:RequestSecurityTokenResponse xmlns:wst="
http://schemas.xmlsoap.org/ws/2005/02/trust";>
      <wst:RequestedSecurityToken>
        <wsc:SecurityContextToken xmlns:wsc="
http://schemas.xmlsoap.org/ws/2005/02/sc"; xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="sctId-26461030">

<wsc:Identifier>urn:uuid:5A329B159327DD4C4A12071928591875</wsc:Identifier>
        </wsc:SecurityContextToken>
      </wst:RequestedSecurityToken>
      <wst:RequestedAttachedReference>
        <wsse:SecurityTokenReference xmlns:wsse="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
">
          <wsse:Reference URI="#sctId-26461030" ValueType="
http://schemas.xmlsoap.org/ws/2005/02/sc/sct"; />
        </wsse:SecurityTokenReference>
      </wst:RequestedAttachedReference>
      <wst:RequestedUnattachedReference>
        <wsse:SecurityTokenReference xmlns:wsse="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
">
          <wsse:Reference URI="urn:uuid:5A329B159327DD4C4A12071928591875"
ValueType="http://schemas.xmlsoap.org/ws/2005/02/sc/sct"; />
        </wsse:SecurityTokenReference>
      </wst:RequestedUnattachedReference>
      <wst:Lifetime>
        <wsu:Created xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
">2008-04-03T03:20:59.187Z</wsu:Created>
        <wsu:Expires xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
">2008-04-03T03:25:59.187Z</wsu:Expires>
      </wst:Lifetime>
      <wst:RequestedProofToken>

<wst:BinarySecret>Mv32yE6EQtm4cWxB+KEhYt3Vb6Ufyl+Upz/IoM8o6as=</wst:BinarySecret>
      </wst:RequestedProofToken>
    </wst:RequestSecurityTokenResponse>
  </soapenv:Body>
</soapenv:Envelope>

How can I add the security header on the SOAP response?

Thanks,

Diego

Reply via email to