Problem Statement:
Consumer invokes the Apigee proxy with SOAP payload with attachment (zip). The SOAP payload has <wsse:security> section to hold credentials. We need to scrub the <wsse:security> section before invoking the backend API.
Solution Tried:
below link has a pointer on parsing the text (password) using Java callout, however not sure how to just scrub the security header without tampering the attachment.
https://community.apigee.com/articles/60050/multipart-multipartform-data-creation-and-parsing.html
Approach#2.
This is what is available in the input stream for request.content in Java Maven project