Securing endpoints deployed in FUSE ESB with WSS
I have been trying to implement WSS on an enpoint I deployed to FUSE ESB 4 as an OSGi bundle and seem to be running into various problems during the process.
First I should state the endpoint works well without WSS, just when I attempt to add WSS I run into the problems I will describe next;
I will try to cover what I had modified in my project to support WSS...
- I added cxf-rt-ws-security 2.2.3 as a dependency to my project
- I added org.apache.ws.security.* to the dynamic import on my pom file
- I created a password callback and added to my spring context
- I added WSS4JInInterceptor to my spring context as follows:
<bean id="authenticationInterceptor" class="org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor"> <constructor-arg> <map> <entry key="action" value="UsernameToken"></entry> <entry key="passwordType" value="PasswordText"></entry> <entry key="passwordCallbackRef" value-ref="myPasswordCallback"></entry> </map> </constructor-arg> </bean>
- I added the interceptor above to my list of inInterceptor as follows:
<jaxws:inInterceptors> <ref bean="authenticationInterceptor"></ref> <ref bean="loggingServiceCallInterceptor"></ref> </jaxws:inInterceptors>
When I try to invoke the service using SoapUI, adding the security headers for the username token, I get two set of errors. First, on the Servicemix console I get the following class not found exceptions:
smx@root:></
