小编Eri*_*era的帖子

尝试向 Web 服务发送 SOAP 请求时出现 WS 安全错误

这是我使用肥皂 UI 发送的 SOAP 请求,但收到一条错误消息“消息不符合配置的策略”

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:csw="http://www.cargospot.com/crystal/cswebservice">
   <soapenv:Header>

     <xwss:SecurityConfiguration dumpMessages="false" xmlns:xwss="http://java.sun.com/xml/ns/xwss/config">
            <xwss:RequireUsernameToken passwordDigestRequired="true" nonceRequired="true"/>
        <xwss:UsernameToken name="somename" password="somepassword" useNonce="true" digestPassword="true"/>
    </xwss:SecurityConfiguration>   
   </soapenv:Header>
   <soapenv:Body>

      <csw:cargoImpMessageRequest>
         <csw:content>test</csw:content>
      </csw:cargoImpMessageRequest>
   </soapenv:Body>
</soapenv:Envelope>
Run Code Online (Sandbox Code Playgroud)

我收到以下回复,

<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
   <SOAP-ENV:Header/>
   <SOAP-ENV:Body>
      <SOAP-ENV:Fault>
         <faultcode>SOAP-ENV:Client</faultcode>
         <faultstring xml:lang="en">com.sun.xml.wss.XWSSecurityException: Message does not conform to configured policy [ AuthenticationTokenPolicy(S) ]:  No Security Header found; nested exception is com.sun.xml.wss.XWSSecurityException: com.sun.xml.wss.XWSSecurityException: Message does not conform to configured policy [ AuthenticationTokenPolicy(S) ]:  No Security Header found</faultstring>
      </SOAP-ENV:Fault>
   </SOAP-ENV:Body>
</SOAP-ENV:Envelope>
Run Code Online (Sandbox Code Playgroud)

下面是Web服务安全配置,

<!-- Web Service Security Configuration --> …
Run Code Online (Sandbox Code Playgroud)

java spring web-services spring-security

4
推荐指数
1
解决办法
1万
查看次数

标签 统计

java ×1

spring ×1

spring-security ×1

web-services ×1