WSSecurity Username token

[vincent321]

Hello,

Could you please tell me how to protect a web service with username token ?

I am not able to find any sample.

Many thanks in advance

[peterj]

See http://labs.jboss.com/jbossws/docs/jaxws_userguide-2.0/index.html#d0e1165

Also, there was an earlier discussion at http://www.jboss.com/index.html?module=bb&op=viewtopic&t=120353

[vincent321]

Thanks Peter,

But the conversation and example are related to x509 token :-(

I want the web service to handle such an header :

<wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
 <wsu:Timestamp wsu:Id="Timestamp-12134742" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
 <wsu:Created>2007-10-14T12:45:34.656Z</wsu:Created>
 <wsu:Expires>2007-10-14T12:46:34.656Z</wsu:Expires>
 </wsu:Timestamp>
 <wsse:UsernameToken wsu:Id="UsernameToken-33259721" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
 <wsse:Username>test</wsse:Username>
 <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">test</wsse:Password>
 </wsse:UsernameToken>
 </wsse:Security>

Thanks,

Vincent

[ejb3workshop]

Did you ever this the resolved. I am having the same problem using JBoss 4.2.2 wich included a new build of JBossWS.

[asoldano]

You can find a basic example of Username Token authentication in the org.jboss.test.ws.jaxws.samples.wssecurity package in the jbossws-src archive.

Also take a look at this: http://www.jboss.com/index.html?module=bb&op=viewtopic&t=95321