Uploaded image for project: 'Spring Web Services'
  1. Spring Web Services
  2. SWS-515

Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler.

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.5.6
    • Fix Version/s: 1.5.8
    • Component/s: Security
    • Labels:
      None

      Description

      Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.

      See https://issues.apache.org/jira/browse/WSS-147 for more info.
      This issue created on basis of https://issues.apache.org/jira/browse/CXF-2186

      Known usages in Spring-WS: org.springframework.ws.soap.security.wss4j.Wss4jHandler

        Issue Links

          Activity

            People

            • Assignee:
              tareq Tareq Abedrabbo
              Reporter:
              hurragutt Paul Nyheim
            • Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: