[ 
https://issues.apache.org/jira/browse/CXF-7677?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sumeet Mahajan updated CXF-7677:
--------------------------------
    Description: 
I am attaching my SOAP request.

It has SOAP Header with usernametoken which also has username and password in 
plain text.

I wrote a CallbackHandler to receive this username and password on server.

I used to get the username and password in cxf 2.7.6 in my callbackhandler. 
Whereas in cxf 3.2.1 I am no longer getting password. Its coming in as null. I 
did follow the new classes (WSPasswordCallback) and changed the package etc.

  was:
I am attaching my SOAP request.

It has SOAP Header with usernametoken which also has username and password in 
plain text.

I wrote a CallbackHandler to receive this username and password on server.

We used to get the username and password before our migration to cxf 3.2.1 but 
not getting password anymore. I did follow the new classes (WSPasswordCallback) 
and changed the package etc.

Not sure whats missing here.


> With CXF 3.2.1, using UsernameToken, cannot receive password in callback
> ------------------------------------------------------------------------
>
>                 Key: CXF-7677
>                 URL: https://issues.apache.org/jira/browse/CXF-7677
>             Project: CXF
>          Issue Type: Bug
>          Components: WS-* Components
>    Affects Versions: 3.2.1
>         Environment: Java 8.
> CXF 3.2.1
> wss4j-2.1.jar
> xmlsec-2.1.0.jar
>            Reporter: Sumeet Mahajan
>            Priority: Critical
>         Attachments: soap-request.xml
>
>
> I am attaching my SOAP request.
> It has SOAP Header with usernametoken which also has username and password in 
> plain text.
> I wrote a CallbackHandler to receive this username and password on server.
> I used to get the username and password in cxf 2.7.6 in my callbackhandler. 
> Whereas in cxf 3.2.1 I am no longer getting password. Its coming in as null. 
> I did follow the new classes (WSPasswordCallback) and changed the package etc.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to