Re: Patch to allow timestamps to be spoofed

Here is an updated patch that includes the ability to disable BSP compliance. David Index: modules/rampart-core/src/main/java/org/apache/rampart/RampartMessageData.java === --- modules/rampart-core/src/main/java/org/apache/rampart/

Question on TokenCallbackHandler

I noticed that the TokenCallbackHandler processes SECURITY_CONTEXT_TOKEN, CUSTOM_TOKEN, and SECRET_KEY but not USERNAME_TOKEN. Am I missing something? I have a response coming back as: http://www.w3.org/2003/05/soap-envelope"; xmlns:SOAP-ENC="http://www.w3.org/2003/05/soap-encoding"; xmlns:xsi=