Wednesday, November 11, 2009

soap with security, Username Token

<soap:Envelope xmlns:har="http://www.yourhost.com/YourWebService" xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
<soap:Header>
<wsse:Security soap:mustUnderstand="true" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken wsu:Id="UsernameToken-25814968" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
<wsse:Username>username</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">GR1ps</wsse:Password>
<wsse:Nonce>iKhvn+MbQxD26oRg89mffA==</wsse:Nonce>
<wsu:Created>2009-11-11T11:37:40.906Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
<soap:Body>
<har:getDetails>
<har:requestorID>requestorID</har:requestorID>
<!--Optional:-->
<har:requestorPassword>password</har:requestorPassword>
<!--Optional:-->
<har:requestData>7042776376380606</har:requestData>
</har:getDetails>
</soap:Body>
</soap:Envelope>


see also
Java and security bits

meta refresh


EPB Webservice Test Application
javascript:void(0)