Help needed! want to add WS security UserNameToken to header

Question

I have a web service problem....
Based off a WSDL file, I have created stub classes in AXIS...that can communicate with the deployed web service (which is a .Net implementation).
That worked well until they added WSE (web service enhancements). Now, obviously, I cannot access the webservice, I get the following error:
AxisFault
faultCode: {http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd}Security
faultSubcode:
faultString: Microsoft.Web.Services3.Security.SecurityFault: Security requirements are not satisfied because the security header is not present in the incoming message.
at Microsoft.Web.Services3.Design.UsernameOverTransportAssertion.ServiceInputFilter.ValidateMessageSecurity (SoapEnvelope envelope, Security security)
at Microsoft.Web.Services3.Security.ReceiveSecurityFilter.ProcessMessage(SoapEnvelope envelope)
at Microsoft.Web.Services3.Pipeline.ProcessInputMessage(SoapEnvelope envelope)
at Microsoft.Web.Services3.WseProtocol.FilterRequest(SoapEnvelope requestEnvelope)
at Microsoft.Web.Services3.WseProtocol.RouteRequest(SoapServerMessage message)
at System.Web.Services.Protocols.SoapServerProtocol.Initialize ()
at System.Web.Services.Protocols.ServerProtocolFactory.Create(Type type, HttpContext context, HttpRequest request, HttpResponse response, Boolean& abortProcessing)
faultActor: http://dev.externalservicesgateway.matrix.cmg.com.au/TokenService.asmx
faultNode:
Basically, what the issue is, is that a header with WSSE security (with a user token: wsse:UsernameToken) needs to be added like so:
<soap:Header>
<wsa:Action> http://Cc.Mc.AU.ExternalServiceGateway/GetToken</wsa:Action>
<wsa:MessageID>urn:uuid:5b000b39-5411-4ae0-af97-6cdd7da329e6</wsa:MessageID>
<wsa:ReplyTo>
<wsa:Address> http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:Address>
</wsa:ReplyTo>
<wsa:To> http://dev.externalservicesgateway.matrix.cmg.com.au/TokenService.asmx</wsa:To>
<wsse:Security soap:mustUnderstand="1">
<wsu:Timestamp wsu:Id="Timestamp-a553fe41-ae60-4f56-90dd-c40596520c42">
<wsu:Created>2006-08-29T00:18:18Z</wsu:Created>
<wsu:Expires>2006-08-29T00:23:18Z</wsu:Expires>
</wsu:Timestamp>
<wsse:UsernameToken xmlns:wsu=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="SecurityToken-
d4372476-403d-4a8f-81f5-f11a34f9f507">
<wsse:Username>user1</wsse:Username>
<wsse:Password Type=" http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile
1.0#PasswordText">abc123</wsse:Password>
<wsse:Nonce>o32XWd4ZnQRpPVIHJvn7sw==</wsse:Nonce>
<wsu:Created>2006-08-29T00:18:18Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
It is really the <wsse: Security> node that I need to inject in the header. What I tried to do was hack the generated stub classes by trying to add header with the wsse node but it is not working. I also think that best practices means that the generated files should not really be touched in theory.
The other thing to do I think is to create a SoapEnvelope with a Header and Body. In the Header I would add the wsse node with userToken. If this is the case, it is still challenging because I have not found any working code that does this so far.
At this point, I am not sure what to do, can anyone help me solve this or guide me in the right direction?? Are there any code samples out there?
I know you can download Apache WSS4J but even that is not clear on how to implement.
Any help would be greatly appreciated.

Answer 1

format the content to use like a regular html anchor tag <a href="link of the doc">download</a>
and then convert the text to html using JS
Whenever you see a reply and if you think is helpful, click "Vote As Helpful"! And whenever
you see a reply being an answer to the question of the thread, click "Mark As Answer