Consuming a Web Service with PasswordDigest Authentication in ABAP

Question

Hello,
I need to consume a web service in ABAP from a non-SAP application. The web service uses wsse:UsernameToken with PasswordDigest in the SOAP Header for authentication. However, I havent seen any documentation for using Password Digest in ABAP.
Is it possible to use Password Digest in ABAP?
Thanks
Ajay

Answer 1

Hi Marc,
Here is the ABAP Code to build the SOAP header.
FUNCTION Z_GET_SOAP_REQUEST_HEADER.
*"*"Local Interface:
*"  EXPORTING
*"     VALUE(ER_SECURITY_ELEMENT) TYPE REF TO  IF_IXML_ELEMENT
*date and time data
  data: lv_sys_date like sy-datum,
        lv_sys_time like sy-uzeit,
        lv_year(4) type c,
        lv_month(2) type c,
        lv_date(2) type c,
        lv_hour(2) type c,
        lv_min(2) type c,
        lv_sec(2) type c.
  data : lv_created type string,
        lv_snonce type string,
        lv_b64nonce type string,
        lv_webservice_password type string,
        lv_webservice_userid type string,
        lv_spassword type string,
        lv_xpassword type xstring,
        lv_hpassword type hash160x,
        lv_b64password(255) type c,
        lv_xpasslen type i,
        lv_hpasslen type i.
*xml declartions
  data : lv_sheader type string,
        lv_xheader type xstring,
        xml_document TYPE REF TO if_ixml_document,
        xml_root TYPE REF TO if_ixml_element,
        xml_element TYPE REF TO if_ixml_element,
        xml_node TYPE REF TO if_ixml_node.
*get the c-link password.
CALL METHOD ZCL_CDB_SYNC_CFG_READER=>GET_USERID_PASSWORD
  IMPORTING
    EV_USER_ID  = lv_webservice_userid
    EV_PASSWORD = lv_webservice_password
*Evaluate created date time
  lv_sys_date = sy-datum.
  lv_sys_time = sy-uzeit.
  lv_year = lv_sys_date(4).
  lv_month = lv_sys_date+4(2).
  lv_date = lv_sys_date+6(2).
  lv_hour = lv_sys_time(2).
  lv_min = lv_sys_time+2(2).
  lv_sec = lv_sys_time+4(2).
  CONCATENATE lv_year '-' lv_month '-' lv_date 'T' lv_hour ':' lv_min ':' lv_sec '.000Z' into lv_created.
*Create and encode the nonce
  CALL FUNCTION 'GENERAL_GET_RANDOM_STRING'
    EXPORTING
      NUMBER_CHARS  = 24
    IMPORTING
      RANDOM_STRING = lv_snonce.
  CALL METHOD cl_http_utility=>ENCODE_BASE64
    EXPORTING
      UNENCODED = lv_snonce
    RECEIVING
      ENCODED   = lv_b64nonce.
*create the password to be sent to web service
  CONCATENATE lv_snonce lv_created lv_webservice_password into lv_spassword.
*encode password to xstring
  CALL FUNCTION 'SCMS_STRING_TO_XSTRING'
    EXPORTING
      TEXT   = lv_spassword
    IMPORTING
      BUFFER = lv_xpassword.
  lv_xpasslen = xstrlen( lv_xpassword ).
  CALL FUNCTION 'CALCULATE_HASH_FOR_RAW'
    EXPORTING
      ALG      = 'SHA1'
      DATA     = lv_xpassword
      LENGTH   = lv_xpasslen
    IMPORTING
      HASHX    = lv_hpassword
      HASHXLEN = lv_hpasslen.
  CALL FUNCTION 'SCMS_BASE64_ENCODE'
    EXPORTING
      INPUT            = lv_hpassword
      INPUT_LENGTH     = lv_hpasslen
    IMPORTING
      OUTPUT           = lv_b64password
    EXCEPTIONS
      OUTPUT_TOO_SMALL = 1
      OTHERS           = 2.
  IF SY-SUBRC <> 0.
* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
*         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
  ENDIF.
* build the header
  CONCATENATE
'<soap-env:Header xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">'
'<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">'
'<wsse:UsernameToken wsu:Id="########" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">'
'<wsse:Username>'
lv_webservice_userid
'</wsse:Username>'
'<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">'
lv_b64password
'</wsse:Password>'
'<wsse:Nonce>'
lv_b64nonce
'</wsse:Nonce>'
'<wsu:Created>'
lv_created
'</wsu:Created>'
'</wsse:UsernameToken>'
'</wsse:Security>'
'</soap-env:Header>'
INTO lv_sheader.
*Build the xml header element
  lv_xheader = cl_proxy_service=>cstring2xstring( lv_sheader ).
  TRY.
      CALL FUNCTION 'SDIXML_XML_TO_DOM'
        EXPORTING
          xml           = lv_xheader
        IMPORTING
          document      = xml_document
        EXCEPTIONS
          invalid_input = 1
          OTHERS        = 2.
      IF sy-subrc = 0 AND NOT xml_document IS INITIAL.
        xml_root = xml_document->get_root_element( ).
        er_security_element ?= xml_root->get_first_child( ).
        gr_soap_security_header = er_security_element.
      ENDIF.
    CATCH cx_ai_system_fault .
  ENDTRY.
ENDFUNCTION.