WS-Security endpoint interceptor that is based on Sun's XML and Web Services Security package (XWSS). This
WS-Security implementation is part of the Java Web Services Developer Pack (Java WSDP).
This interceptor needs a CallbackHandler to operate. This handler is used to retrieve certificates,
private keys, validate user credentials, etc. Refer to the XWSS Javadoc to learn more about the specific
Callbacks fired by XWSS. You can also set multiple handlers, each of which will be used in turn.
Additionally, you must define a XWSS policy file by setting policyConfiguration property. The format of
the policy file is documented in the Java
Web Services Tutorial.
Note that this interceptor depends on SAAJ, and thus requires SaajSoapMessages to operate. This
means that you must use a SaajSoapMessageFactory to create the SOAP messages.
author: Arjen Poutsma See Also:XwsSecurityInterceptor.setCallbackHandler(javax.security.auth.callback.CallbackHandler) See Also:XwsSecurityInterceptor.setPolicyConfiguration(org.springframework.core.io.Resource) See Also: com.sun.xml.wss.impl.callback.XWSSCallback See Also:org.springframework.ws.soap.saaj.SaajSoapMessageFactory See Also:XWSS
Secures the given SoapMessage message in accordance with the defined security policy.
Parameters: soapMessage - the message to be secured throws: XwsSecuritySecurementException - in case of errors throws: IllegalArgumentException - when soapMessage is not a SaajSoapMessage
Validates the given SoapMessage message in accordance with the defined security policy.
Parameters: soapMessage - the message to be validated throws: XwsSecurityValidationException - in case of errors throws: IllegalArgumentException - when soapMessage is not a SaajSoapMessage
Fields inherited from org.springframework.ws.soap.security.AbstractWsSecurityInterceptor