Spring/spring-ws
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Polish "Allow to sign SOAP attachments"

Browse Source 
See gh-107
This commit is contained in:
Stéphane Nicoll
2025-03-10 06:16:18 +01:00
parent 59f3ae0b67
commit 90ff94a777
1 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
spring-ws-security/src/main/java/org/springframework/ws/soap/security/wss4j2/Wss4jSecurityInterceptor.java
View File

@@ -461,12 +461,13 @@ public class Wss4jSecurityInterceptor extends AbstractWsSecurityInterceptor impl
}
/**
* Sets the attachment callback handler used for SwA signature/encryption
* @param attachmentCallbackHandler
*/
public void setAttachmentCallbackHandler (CallbackHandler attachmentCallbackHandler) {
this.attachmentCallbackHandler = attachmentCallbackHandler;
}
* Set the {@link CallbackHandler} to use to sign/encrypt attachments.
* @param attachmentCallbackHandler the attachment callback handler
* @since 4.1.0
*/
public void setAttachmentCallbackHandler(CallbackHandler attachmentCallbackHandler) {
this.attachmentCallbackHandler = attachmentCallbackHandler;
}
/**
* Sets the server-side time to live.
@@ -715,13 +716,14 @@ public class Wss4jSecurityInterceptor extends AbstractWsSecurityInterceptor impl
requestData.setWssConfig(this.wssConfig);
requestData.setAttachmentCallbackHandler(attachmentCallbackHandler);
messageContext.setProperty(WSHandlerConstants.TTL_TIMESTAMP, Integer.toString(this.securementTimeToLive));
if (this.samlCallbackHandler != null) {
messageContext.setProperty(WSHandlerConstants.SAML_CALLBACK_REF, this.samlCallbackHandler);
}
if (this.attachmentCallbackHandler != null) {
requestData.setAttachmentCallbackHandler(this.attachmentCallbackHandler);
}
// allow for qualified password types for .Net interoperability
requestData.setAllowNamespaceQualifiedPasswordTypes(true);