[Xml-compile] WS-Security to Axis2 server

[gstewart]

Hi Mark,

Looks like:

my $usernameToken =3D $wss->wsseBasicAuth($username, $password,
UTP11_PDIGEST, nonce =3D> $nonce, created =3D> $now);

creates:

<wsse:UsernameToken xmlns:wsse=3D"
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1=
.0.xsd"
xmlns:wsu=3D"
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-=
1.0.xsd
">
<wsse:Username>username</wsse:Username>
<wsse:Nonce>bHM5dldzaGRDV3U8UWtXWjE8ZW5pRFpAPndvUkpOMWg=3D
</wsse:Nonce>
<wsu:Created>2012-08-30T23:45:58Z</wsu:Created>
<wsse:Password Type=3D"
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-prof=
ile-1.0#PasswordDigest
">password_digest</wsse:Password>
</wsse:UsernameToken>

(Should there be a newline before </wsse:Nonce>?)

...and

my $usernameToken =3D $wss->wsseBasicAuth($username, $password, UTP11_PTEXT,
nonce =3D> $nonce, created =3D> $now);

creates:

<wsse:UsernameToken xmlns:wsse=3D"
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1=
.0.xsd
">
<wsse:Username>username</wsse:Username>
<wsse:Password Type=3D"
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-prof=
ile-1.0#PasswordText
">password</wsse:Password>
</wsse:UsernameToken>

Am I misunderstanding? Should there still be a nonce?

With much thanks for all your support and development work,

Graeme


On Thu, Aug 30, 2012 at 3:15 PM, Mark Overmeer <mark at overmeer.net> wrote:

> * gstewart (gstewart at gmail.com) [120830 22:02]:
> > my $security =3D $wss->wsseBasicAuth($username, $password);
>
> ..
>
> >             <wsse:Nonce EncodingType=3D"
>
> > Now on to craft the correct XML (fill in the blanks) using XML-Compile
>
> Install XML::Compile::WSS released this morning (Aug 30).  It contains
> the extension by David McMath for nonce and created fields.  Also, see
> his examples/usertoken/with_help_digest.pl script.
> --
> Success,
>
>                MarkOv
>
> ------------------------------------------------------------------------
>        Mark Overmeer MSc                                MARKOV Solutions
>        Mark at Overmeer.net                          solutions at overmeer.net
> http://Mark.Overmeer.net                   http://solutions.overmeer.net
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.scsys.co.uk/pipermail/xml-compile/attachments/20120830/ae=
4b4e11/attachment.htm