[JBoss JIRA] Created: (JBWS-2640) UsernameToken does not correctly handle "Created" element from wsse:Security soap header
by MrTed MrTed (JIRA)
UsernameToken does not correctly handle "Created" element from wsse:Security soap header
----------------------------------------------------------------------------------------
Key: JBWS-2640
URL: https://jira.jboss.org/jira/browse/JBWS-2640
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: ws-security
Affects Versions: jbossws-native-3.1.1
Environment: AS: jboss-4.2.3.GA on Windows XP
jbossws-native-3.1.1.GA
Reporter: MrTed MrTed
UsernameToken does not correctly handle "Created" element from wsse:Security soap header.
Oasis standard describes "Created" element in the following way:
/wsse:UsernameToken/wsu:Created
The optional <wsu:Created> element specifies a timestamp used to indicate the creation time. It is defined as part of the <wsu:Timestamp> definition.
The solution - Constants.WSU_NS should be used instead of Constants.WSSE_NS. "Created" element is described in http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utilit...
In the code org.jboss.ws.extensions.security.element.UsernameToken
"Created" element is recived via:
Iterator<Element> itCreated = DOMUtils.getChildElements(element, new QName(Constants.WSSE_NS, "Created"));
instead it should be:
Iterator<Element> itCreated = DOMUtils.getChildElements(element, new QName(Constants.WSU_NS, "Created"));
The same goes for line:
child = doc.createElementNS(Constants.WSSE_NS, Constants.WSSE_PREFIX + ":" + "Created");
should be:
child = doc.createElementNS(Constants.WSU_NS, Constants.WSU_PREFIX + ":" + "Created");
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 7 months
[JBoss JIRA] Created: (JBWS-3004) JAX-WS Port injected using @WebServiceRef retains last message
by Darran Lofthouse (JIRA)
JAX-WS Port injected using @WebServiceRef retains last message
--------------------------------------------------------------
Key: JBWS-3004
URL: https://jira.jboss.org/jira/browse/JBWS-3004
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Affects Versions: jbossws-native-3.3.0
Reporter: Darran Lofthouse
Assignee: Darran Lofthouse
Fix For: jbossws-native-4.0
The class org.jboss.ws.core.CommonClient contains the following member variable: -
// Output parameters
protected EndpointInvocation epInv;
Within CommonClient this variable is only accessed from within the invoke method and each time the invoke method is called the EndpointInvocation is recreated - however the member variable is in place as org.jboss.ws.core.jaxrpc.client.CallImpl which extends CommonClient access it for subsequent calls.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 7 months