Re: axis2 security bug?

2009-10-21 Thread Keith Chapman
To answer your question on the action attribute, It is a optional part of the Content-Type header (When SOAP 1.2 is used which is your case) which gives a hint to the server to dispatch the request. If you had used SOAP 1.1 it would have been a separate HTTP header called soapaction (Which is manda

Re: axis2 security bug?

2009-10-21 Thread Jaime Hablutzel Egoavil
I'm using wso2 for axis2 spring support: pom.xml (extract) org.apache.rampart rampart-core 1.4 org.apache.axis2 axis2-kernel 1.4.1 org.wso2.spring.ws wsf-spri

Re: axis2 security bug?

2009-10-20 Thread Amila Suriarachchi
what is the axis2 version you use? thanks, Amila. On Tue, Oct 20, 2009 at 7:10 PM, Jaime Hablutzel Egoavil < hablutz...@gmail.com> wrote: > Hi, I'm a newbie in web services and security, I'm using wso2 as an axis2 > wrapper for making working with Spring easier, well > > I have published a servi

axis2 security bug?

2009-10-20 Thread Jaime Hablutzel Egoavil
Hi, I'm a newbie in web services and security, I'm using wso2 as an axis2 wrapper for making working with Spring easier, well I have published a service that requires user token authentication and SSL transport using this policy: http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-