[JBoss JIRA] Created: (JBWS-2640) UsernameToken does not correctly handle "Created" element from wsse:Security soap header
by MrTed MrTed (JIRA)
UsernameToken does not correctly handle "Created" element from wsse:Security soap header
----------------------------------------------------------------------------------------
Key: JBWS-2640
URL: https://jira.jboss.org/jira/browse/JBWS-2640
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: ws-security
Affects Versions: jbossws-native-3.1.1
Environment: AS: jboss-4.2.3.GA on Windows XP
jbossws-native-3.1.1.GA
Reporter: MrTed MrTed
UsernameToken does not correctly handle "Created" element from wsse:Security soap header.
Oasis standard describes "Created" element in the following way:
/wsse:UsernameToken/wsu:Created
The optional <wsu:Created> element specifies a timestamp used to indicate the creation time. It is defined as part of the <wsu:Timestamp> definition.
The solution - Constants.WSU_NS should be used instead of Constants.WSSE_NS. "Created" element is described in http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utilit...
In the code org.jboss.ws.extensions.security.element.UsernameToken
"Created" element is recived via:
Iterator<Element> itCreated = DOMUtils.getChildElements(element, new QName(Constants.WSSE_NS, "Created"));
instead it should be:
Iterator<Element> itCreated = DOMUtils.getChildElements(element, new QName(Constants.WSU_NS, "Created"));
The same goes for line:
child = doc.createElementNS(Constants.WSSE_NS, Constants.WSSE_PREFIX + ":" + "Created");
should be:
child = doc.createElementNS(Constants.WSU_NS, Constants.WSU_PREFIX + ":" + "Created");
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 8 months
[JBoss JIRA] Created: (JBWS-1672) SunRI does not respect @HandlerChain on client SEI
by Thomas Diesler (JIRA)
SunRI does not respect @HandlerChain on client SEI
--------------------------------------------------
Key: JBWS-1672
URL: http://jira.jboss.com/jira/browse/JBWS-1672
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: integration-sunri
Reporter: Thomas Diesler
Fix For: jbossws-2.1.0
tests-run-internal:
[junit] Running org.jboss.test.ws.jaxws.samples.handlerchain.HandlerChainTestCase
[junit] FIXME: [JBWS-1671] SunRI client handler cannot set mime header
[junit] Tests run: 2, Failures: 1, Errors: 0, Time elapsed: 4.209 sec
[junit] Test org.jboss.test.ws.jaxws.samples.handlerchain.HandlerChainTestCase FAILED
@WebService(name="Endpoint")
@SOAPBinding(style = SOAPBinding.Style.RPC)
@HandlerChain(file = "jaxws-handlers-client.xml") // relative path from the class file
public interface EndpointWithHandlerChain
{
public String echo(String input);
}
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 9 months
[JBoss JIRA] Created: (JBWS-2021) app-client with client and server not sharing the same filesystem
by Alessio Soldano (JIRA)
app-client with client and server not sharing the same filesystem
-----------------------------------------------------------------
Key: JBWS-2021
URL: http://jira.jboss.com/jira/browse/JBWS-2021
Project: JBoss Web Services
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Reporter: Alessio Soldano
Assigned To: Alessio Soldano
Fix For: jbossws-native-2.0.5
Some jax-rpc tests using app-client were failing due to JBVFS-17. This however pointed out that our current implementation for app-client is supposed to work only when server and client share the same filesystem (see the referenced forum thread). We should think about something like a buffering virtual file implementation that eagerly reads the referenced resources from the file system before the metadata it is contained in is bound to the JNDI.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 10 months
[JBoss JIRA] Created: (JBWS-2656) no soap 1.2 inline multireferences support
by Wojciech Oczkowski (JIRA)
no soap 1.2 inline multireferences support
------------------------------------------
Key: JBWS-2656
URL: https://jira.jboss.org/jira/browse/JBWS-2656
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: jbossws-native
Affects Versions: jbossws-native-3.0.2
Environment: debian, jboss-4.2, sun-java-6
Reporter: Wojciech Oczkowski
jbossws doesn't seem to support inline multireferences from soap 1.2 while consuming webservices from other enviroments (php for example)
result like:
<item>
<name>item1</name>
<product enc:id="ref1">
<name>product1</name>
</product>
</item>
<item>
<name>item2</name>
<product enc:ref="#ref1"/>
</item>
is unmarshaled with item2 object with product object filled with null's
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 10 months
[JBoss JIRA] Created: (JBWS-2572) Marshalling JAXB element over SOAPHeader produces an empty element
by Jose Antonio (JIRA)
Marshalling JAXB element over SOAPHeader produces an empty element
------------------------------------------------------------------
Key: JBWS-2572
URL: https://jira.jboss.org/jira/browse/JBWS-2572
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: jbossws-native
Affects Versions: jbossws-native-3.0.5
Environment: JDK 1.6, JBoss 4.2.3, Ubuntu Linux 8.10
Reporter: Jose Antonio
Hello, I'm trying to set some ws security headers manually in a handler for a Web service client and server. I have generated JAXB bindings from WS Security schema and in the client, I generate a Security element with a UserNameToken inside. Then, I try to put it in the headers in my handler like this:
public boolean handleMessage(SOAPMessageContext context) {
............................................
ObjectFactory fact = new ObjectFactory();
JAXBElement<SecurityHeaderType> secHead = fact.createSecurity(sec);
Marshaller marshaller = ctx.createMarshaller();
SOAPEnvelope envelope = context.getMessage().getSOAPPart().getEnvelope();
SOAPHeader header = (envelope.getHeader() == null) ? envelope.addHeader() : envelope.getHeader();
marshaller.marshal(secHead,header);
sec is a JAXB element with the Security element content and is not null and not empty. If I execute my client with this handler in local, using JAX-WS RI 2.1, I get the expected behavior and I get a header with a Security element and a UserNameToken inside. But when I deploy my client in JBoss and try to execute it, I get an empty Security element. There is no UserNameToken inside.
I tried the following workaround and it works for JBoss:
DocumentBuilder builder = DocumentBuilderFactory.newInstance().newDocumentBuilder();
Document doc = builder.newDocument();
marshaller.marshal(secHead, doc);
SOAPFactory sFact = SOAPFactory.newInstance();
header.appendChild(sFact.createElement(doc.getDocumentElement()));
However, it's not the optimum way of doing it, since I need to create two factories and an intermediary document only to append a child to a header, while it could be done only with one sencence.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 10 months
[JBoss JIRA] Created: (JBWS-2534) sun-jaxws.xml generation doesn't respect @MTOM
by Alessio Soldano (JIRA)
sun-jaxws.xml generation doesn't respect @MTOM
----------------------------------------------
Key: JBWS-2534
URL: https://jira.jboss.org/jira/browse/JBWS-2534
Project: JBoss Web Services
Issue Type: Bug
Security Level: Public (Everyone can see)
Components: jbossws-metro
Reporter: Alessio Soldano
>From SunJaxwsDeploymentAspect:
Class beanClass = endpoint.getTargetBeanClass();
BindingType bindingType = (BindingType)beanClass.getAnnotation(BindingType.class);
if (bindingType != null && bindingType.value().length() > 0)
{
String binding = bindingType.value();
ddEndpoint.setBinding(binding);
ddEndpoint.setEnableMTOM(isMtomEnabled(binding));
}
...
private static boolean isMtomEnabled(String binding)
{
return binding.equals(SOAPBinding.SOAP11HTTP_MTOM_BINDING) || binding.equals(SOAPBinding.SOAP12HTTP_MTOM_BINDING);
}
The @MTOM annotation should be considered too when enabling/disabling MTOM.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
14 years, 10 months