WS-Security headers and timestamp

[rajkalgur]

Hi Dino,

this is continuation for below post. 

https://www.googlecloudcommunity.com/gc/Apigee/Applying-WS-S-UsernameToken-and-WS-Security/td-p/6799...

I have captured payload from layer7 and apigee. I see there is a difference in headers and timestamp is missing from payload.

layer 7 payload:

<soapenv:Envelope

xmlns:mdmport="http://www.ibm.com/mdm/port/Party"

xmlns:ns2="http://www.ibm.com/mdm/schema"

xmlns:ns3="http://www.tmw.com/SearchCustomer/SearchCustomerRequest.xsd"

xmlns:ns4="/MDMServicesLibrary/SharedServices/MDM/Processes/Party/SearchPerson-Start-Input.xsd"

xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"

xmlns:tib="http://www.tibco.com/bw/xslt/custom-functions"

xmlns:xsd="http://www.w3.org/2001/XMLSchema">

<soapenv:Header>

<wsse:Security soapenv:mustUnderstand="1"

xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">

<wsu:Timestamp>

<wsu:Created>2024-03-12T19:51:39.496228242Z</wsu:Created>

<wsu:Expires>2024-03-12T19:56:39.496Z</wsu:Expires>

</wsu:Timestamp>

<wsse:UsernameToken>

<wsse:Username>username</wsse:Username>

<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">8iekfjk</wsse:Password>

<wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">dffddffsds</wsse:Nonce>

<wsu:Created>2024-03-12T19:51:39Z</wsu:Created>

</wsse:UsernameToken>

</wsse:Security>

</soapenv:Header>

APIGEE payload:

<soapenv:Envelope

xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"

xmlns:mdmport="http://www.ibm.com/mdm/port/Party"

xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"

xmlns:xsd="http://www.w3.org/2001/XMLSchema"

xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"

xmlns:ns2="http://www.ibm.com/mdm/schema"

xmlns:tib="http://www.tibco.com/bw/xslt/custom-functions"

xmlns:ns4="/MDMServicesLibrary/SharedServices/MDM/Processes/Party/SearchPerson-Start-Input.xsd"

xmlns:ns3="http://www.tmw.com/SearchCustomer/SearchCustomerRequest.xsd">

<soapenv:Header>

<wsse:Security soapenv:mustUnderstand="1">

<wsse:UsernameToken wsu:Id="UsernameToken-8a954b25-c8c1-43bc-9b75-cf1bdc5dc956">

<wsse:Username>username</wsse:Username>

<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">ffregtherg</wsse:Password>

<wsu:Created>2024-03-12T18:41:40Z</wsu:Created>

<wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">tTToQi+o0upZ2r/nrH8EzhD6o6U=</wsse:Nonce>

</wsse:UsernameToken>

</wsse:Security>

</soapenv:Header>

in apigee payload below namespaces are added under soapenv:Envelope where as in layer 7 they are added under soapenv:Header

xmlns:wsu

xmlns:wsse

and also timestamp tag is missing apigee payload.

Could you please build new jar and share with me.