Hi All,

I am having trouble calling basic Auth backend from ESB 4.9.0. I have a DSS
service secured by basic Auth using the attached WS Policy file
(WSPolicy-UsernameToken.xml).

I can call this service successfully from SOAP UI by adding 'Authorization'
header.

To call this service from ESB I went through few examples on the web as [1]
which explain to add a property with the 'Authorization' details. When I
use the Call Mediator and invoke the secure DSS service using this method,
I am getting HTTP 500 with below soap fault. There are no errors/logs on
DSS server.

<soapenv:Envelope xmlns:soapenv="http://www.w3.org/2003/05/soap-envelope";>
   <soapenv:Header>
      <wsse:Security soapenv:mustUnderstand="true" xmlns:wsse="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-
1.0.xsd">
         <wsu:Timestamp wsu:Id="Timestamp-15" xmlns:wsu="http://docs.oasis-
open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsu:Created>2016-08-22T03:27:59.437Z</wsu:Created>
            <wsu:Expires>2016-08-22T03:32:59.437Z</wsu:Expires>
         </wsu:Timestamp>
      </wsse:Security>
   </soapenv:Header>
   <soapenv:Body>
      <soapenv:Fault>
         <soapenv:Code>
            <soapenv:Value>soapenv:Receiver</soapenv:Value>
         </soapenv:Code>
         <soapenv:Reason>
            <soapenv:Text xml:lang="en-US">InvalidSecurity</soapenv:Text>
         </soapenv:Reason>
         <soapenv:Detail/>
      </soapenv:Fault>
   </soapenv:Body>
</soapenv:Envelope>

I enabled the wire logs from ESB and 'Authorization' header is available in
the outgoing message.
I logged the 'Authorization' header from DSS and it is properly received
from the DSS as well.

Looks to me like I'm doing this wrong but cannot figure out what. Any help
is much appreciated.


[1] -
http://xacmlinfo.org/2014/08/20/how-to-esb-invoking-basic-auth-secured-backend-service/
​
 WSPolicy-UsernameToken.xml
<https://drive.google.com/a/wso2.com/file/d/0BwVlnhzym_FWNXFMcG5UT2NxLTJKaUZvSXRZLWVtRHFXSVpr/view?usp=drive_web>
​

Thanks,
Akalanka.

-- 
*Darshana Akalanka Pagoda Arachchi,*
*Software Engineer, WSO2*
*+94777118016*
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to