I've been banging my head against the wall for a few days now. I'm seeing an issue when using CXF 2.2.7 and wss4j 1.5.8.
I have 2 eclipse projects. One uses the reference JAX-WS implementation in the SDK. The other uses CXF. When I use the reference JAX-WS implementation, the outgoing request correctly adds the wsu:Id attribute to the outgoing request: <ns2:Timestamp xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200512" xmlns:ns2="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" xmlns:ns3="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:ns4="http://www.w3.org/2005/08/addressing" xmlns:ns5="http://www.rsa.com/names/2009/12/std-ext/WS-Trust1.4/advice" xmlns:ns6="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:ns7="http://www.w3.org/2000/09/xmldsig#" xmlns:ns8="http://www.rsa.com/names/2009/12/std-ext/SAML2.0" xmlns:ns9="urn:oasis:names:tc:SAML:2.0:conditions:delegation" ns2:Id="_a199e922-5238-46ca-a93a-f73db181e918"> <----see here <ns2:Created>2015-11-29T19:40:02.949Z</ns2:Created><ns2:Expires>2015-11-29T19:50:02.949Z</ns2:Expires></ns2:Timestamp> However, when I use CXF 2.2.7 and WSS4j, the request has a missing wsu:id attribute and hence the server rejects the request: <ns2:Timestamp xmlns="http://doc s.oasis-open.org /ws-sx/ws-trust/ 200512" xmlns:ns 2="http://docs.o asis-open.org/wss/2004/01/oasis- 200401-wss-wssec urity-utility-1.0.xsd" xmlns:ns3 ="http://www.w3.org/2005/08/addressing" xmlns:ns 4="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:ns5="http://www.rsa.com/names/2009/12/std-ext/WS-Tru st1.4/advice" xmlns:ns6="urn:oasis:names:tc:SAML :2.0:assertion" xmlns:ns7="http://www.w3.org/200 0/09/xmldsig#" xmlns:ns8="http:/ /www.rsa.com/nam es/2009/12/std-ext/SAML2.0" xmln s:ns9="urn:oasis :names:tc:SAML:2 .0:conditions:delegation"> <---Missing Id <ns2:Created>2015-11-3 0T19:47:21.912Z< /ns2:Created><ns 2:Expires>2015-1 1-30T19:57:21.91 2Z</ns2:Expires> </ns2:Timestamp> Why am I seeing this difference when using CXF + wss4j? Thanks, -- View this message in context: http://cxf.547215.n5.nabble.com/Question-on-wsu-id-attribute-added-to-outgoing-request-tp5763408.html Sent from the cxf-dev mailing list archive at Nabble.com.
