users@glassfish.java.net

XWSS username token

From: Jose Noheda <jose.noheda_at_gmail.com>
Date: Mon, 28 Jul 2008 14:59:54 +0200

Hi,

I've tried XWSS and has worked from the start. It creates the following
header:

        <wsse:UsernameToken xmlns:wsu="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
wsu:Id="XWSSGID-1217247178093-1341618277">
                <wsse:Username>jose</wsse:Username>
                <wsse:Password Type="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText
">****</wsse:Password>
                <wsse:Nonce EncodingType="
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary
">S621Yl1KmoTGQeWIeFFfoceL</wsse:Nonce>
                <wsu:Created>2008-07-28T12:13:22.031Z</wsu:Created>
            </wsse:UsernameToken>

I'm not sure if the password is correct though (it should be "jose"). The
spec at WSS shows an encrypted password in addition to the nonce. Can anyone
confirm this is the expected output?

Regards,