AW: is this PASSWORD_TEXT problem a bug of WSS4J

[Dittmann, Werner]

You should use WSConstants.PW_TEXT or WSConstants.PW_DIGEST to

define the type of password. Pls have a look into javado fo WSConstants.

 

Regards,

Werner

---

Von: Xinjun Chen [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 19. Mai 2006 07:44
An: wss4j-dev@ws.apache.org
Betreff: Re: is this PASSWORD_TEXT problem a bug of WSS4J

Have anyone experienced this before?

 

Regards,

Xinjun

 

On 5/16/06, Xinjun Chen <[EMAIL PROTECTED]> wrote:

I experienced the following issues. Even though I specify password type to be WSConstants.PASSWORD.TEXT, i still get the digested password in the header.

 

The following is the code snippet.

 

  Document domDoc = Axis2Util.getDocumentFromSOAPEnvelope(envelope);
  WSSAddUsernameToken builder = new WSSAddUsernameToken("", false);

  token.setDigest(true);
  if (token.isDigest()) {
   builder.setPasswordType(WSConstants.PASSWORD_DIGEST);
  } else {
   builder.setPasswordType(WSConstants.PASSWORD_TEXT);
  }
  builder.build(domDoc, token.getUsername(), token.getPassword());
      
  Element domHeader = (Element) domDoc.getFirstChild().getFirstChild();      
  OMElement omHeader = (OMElement) (Axis2Util.toOM(domHeader));    
  log.debug("[SenderHandler][addUsernameToken] omHeader: " + omHeader.toString());

 

By right, the omHeader should contain the security header with plain text password. However, what I get is digested password with nounce and created.

 

Is this a bug of WSS4J or I missed out something?

 

Regards,

Xinjun