I'd like to invoke an external web service that requires WS UsernameToken
header.  The following is an example request that carries username, nonce,
digested password, created timestamp to the service.

http://incubator.apache.org/servicemix/ws-security.html talked about how a
HTTP consumer endpoint uses WS UsernameToken.  Can someone enlighten me how
to develop a HTTP provider endpoint using WS UsernameToken?  Thank you.

    <?xml version="1.0" encoding="UTF-8"?>
>     <soapenv:Envelope
>         xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/";
>         xmlns:xsd="http://www.w3.org/2001/XMLSchema";
>         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";>
>         <soapenv:Header>
>             <wsse:Security
>                 soapenv:actor="http://schemas.xmlsoap.org/soap/actor/next";
>                 soapenv:mustUnderstand="1"
>                 xmlns:wsse="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
> ">
>                 <wsse:UsernameToken wsu:Id="LOGIN"
>                     xmlns:wsu="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
> ">
>                     <wsse:Username>admin</wsse:Username>
>                     <wsse:Password
>                         Type="
> http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest
> ">
>                         eDQUHeku0Mr188gx8Eo88Ik1tK8=
>                     </wsse:Password>
>                     <wsse:Nonce>MTE4NjA4NDcyNDYxMA==</wsse:Nonce>
>                     <wsu:Created>2007-08-02T19:58:44Z</wsu:Created>
>                 </wsse:UsernameToken>
>             </wsse:Security>
>         </soapenv:Header>
>         <soapenv:Body>
>             <Login
>                 xmlns="http://testserver.com/test1/TWebService/Login";>
>                 <userLoginId>admin</userLoginId>
>             </Login>
>         </soapenv:Body>
>     </soapenv:Envelope>
>

-- 

Simon S.

Reply via email to