Adding soap security header with php

Question

I have been tasked with rewriting a .NET application which communicates using a WSE Proxy to PHP. There is one thing I'm grappling with. I see the code UsernameToken userNameToken1 = new UsernameToken(sToken_UserName, sToken_Password, PasswordOption.SendPlainText); Which, I assume, adds a security header to the SOAP envelope. I am not sure how to do this in PHP. I tried the following snippet which I found online somewhere

$token = new stdClass;
$token->Username = new SOAPVar($username, XSD_STRING, null, null, null, $ns);
$token->Password = new SOAPVar($password, XSD_STRING, null, null, null, $ns);

$wsec = new stdClass;
$wsec->UsernameToken = new SoapVar($token, SOAP_ENC_OBJECT, null, null, null, $ns);

$headers = new SOAPHeader($ns, 'Security', $wsec, true);
$client->__setSOAPHeaders($headers);

But I get the following exception back:

Uncaught SoapFault exception: [SOAP-ENV:Client] com.sun.xml.wss.XWSSecurityException: Receiver Requirement for nonce has not been met; nested exception is com.sun.xml.wss.XWSSecurityException: com.sun.xml.wss.XWSSecurityException: Receiver Requirement for nonce has not been met

What am I doing wrong here? Is there missing information that I need to know?

Don · Accepted Answer · 2010-02-16 19:12:00Z

2

You are sending the password in plain-text (I assume over SSL?), but the web service also requires a nonce.

See this discussion as it seems to be dealing with the same problem: http://wso2.org/forum/thread/5304

answered Feb 16, 2010 at 19:12

Don

3,6841 gold badge29 silver badges47 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Eric J. · Accepted Answer · 2010-02-16 19:13:19Z

0

I spent a lot of time trying various approaches to WS-Security with PHP.

Finally I stumbled across this research paper by IBM that outlines an outstanding solution. We're now using it for high-volume integration with our web service.

answered Feb 16, 2010 at 19:13

Eric J.

151k65 gold badges353 silver badges563 bronze badges

Collectives™ on Stack Overflow

Adding soap security header with php

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related