Requiring "ValueType to be set" breaks the wsse standard 1.0 and 1.1!!!
(tested in jbossws-3.0.1-native-204.GA)
Please change. Thanks a lot.
See ...
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-secu...
page 22, lines 702 - 708
702 /wsse:SecurityTokenReference/wsse:Reference/@ValueType
703 This optional attribute specifies a URI that is used to identify the type of token
being
704 referenced. This specification does not define any processing rules around the usage
of
705 this attribute, however, specifications for individual token types MAY define
specific
706 processing rules and semantics around the value of the URI and how it SHALL be
707 interpreted. If this attribute is not present, the URI MUST be processed as a normal
URI.
708 The usage of ValueType is RECOMMENDED for references with local URIs.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4170841#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...