Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-1032

Add setOptionalSecurementSignatureParts to Wss4jSecurityInterceptor

    Details

    • Type: New Feature
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.0.3
    • Fix Version/s: None
    • Component/s: Security
    • Labels:
      None

      Description

      We are building a SOAP client for a service that requires certain elements to be signed. However not all elements will be available in the request at all times.

      Wss4j has the option to set optional signature parts (WSHandlerConstants.OPTIONAL_SIGNATURE_PARTS). However Wss4jSecurityInterceptor does not provide a method to set this option.

      We are now working around this by setting the option in the messagecontext in a custom interceptor but this is no ideal solution.

      As there is a similar issue for another property mentioned in https://jira.spring.io/browse/SWS-1023 I would highly recommend to add a possibility to set Wss4j options directly in the handler instead of having to wait for methods to be added to the Spring interceptor. Otherwise I would suggest making the handler protected instead of private so we could extend the interceptor and add such logic there.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              pvisser Paul Visser
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: