Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-515

Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.5.6
    • Fix Version/s: 1.5.8
    • Component/s: Security
    • Labels:
      None

      Description

      Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.

      See https://issues.apache.org/jira/browse/WSS-147 for more info.
      This issue created on basis of https://issues.apache.org/jira/browse/CXF-2186

      Known usages in Spring-WS: org.springframework.ws.soap.security.wss4j.Wss4jHandler

        Issue Links

          Activity

          Hide
          tareq Tareq Abedrabbo added a comment -

          We need to upgrade to wss4j 1.5.8 to implement this.

          Show
          tareq Tareq Abedrabbo added a comment - We need to upgrade to wss4j 1.5.8 to implement this.
          Hide
          arjen.poutsma Arjen Poutsma added a comment -

          Unfortunately, 1.5.8 does not seem to be available on any maven repository (yet). I will postpone this issue to the next minor release.

          Show
          arjen.poutsma Arjen Poutsma added a comment - Unfortunately, 1.5.8 does not seem to be available on any maven repository (yet). I will postpone this issue to the next minor release.
          Hide
          arjen.poutsma Arjen Poutsma added a comment -

          Closing old issues

          Show
          arjen.poutsma Arjen Poutsma added a comment - Closing old issues

            People

            • Assignee:
              tareq Tareq Abedrabbo
              Reporter:
              hurragutt Paul Nyheim
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: