[SWS-515] Validate WSS headers using new checkReceiverResultsAnyOrder method in WSHandler. Created: 18/May/09 Updated: 04/May/12 Resolved: 18/Aug/09
|Project:||Spring Web Services|
|Reporter:||Paul Nyheim||Assignee:||Tareq Abedrabbo|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
Change the method used to validate WSS headers such that the order of the headers is unimportant. The current method used to validate WSS headers requires the headers be sent in a specific order; also the current method is counter-intuitive as it reverses the headers before checking them.
Known usages in Spring-WS: org.springframework.ws.soap.security.wss4j.Wss4jHandler
|Comment by Tareq Abedrabbo [ 18/May/09 ]|
We need to upgrade to wss4j 1.5.8 to implement this.
|Comment by Arjen Poutsma [ 18/May/09 ]|
Unfortunately, 1.5.8 does not seem to be available on any maven repository (yet). I will postpone this issue to the next minor release.
|Comment by Arjen Poutsma [ 04/May/12 ]|
Closing old issues