Impossible to use CallbackHandler for WS-Security with Jdeveloper 11.1.2.1

Question

I have created WS client and proxy with JDeveloper 11.1.2.1 wizard. Security: oracle/wss10_username_token_with_message_protection_client_policy.
For the callback handler I use the following class (API: http://download.oracle.com/javase/6/docs/api/javax/security/auth/callback/CallbackHandler.html):
package package_test;
import java.io.IOException;
import java.text.DateFormat;
import java.util.Date;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.TextOutputCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
public class ClientSecurityHandlerCallback implements CallbackHandler{
public ClientSecurityHandlerCallback() {
super();
public void handle(Callback[] callbacks)
throws IOException, UnsupportedCallbackException {
System.out.printf("%s In Callback ClientSecurityHandlerCallback.handle\n", DateFormat.getDateTimeInstance().format(new Date()));
for (int i = 0; i < callbacks.length; i++) {
if (callbacks[i] instanceof TextOutputCallback) {
// display the message according to the specified type
TextOutputCallback toc = (TextOutputCallback)callbacks;
switch (toc.getMessageType()) {
case TextOutputCallback.INFORMATION:
System.out.println(toc.getMessage());
break;
case TextOutputCallback.ERROR:
System.out.println("ERROR: " + toc.getMessage());
break;
case TextOutputCallback.WARNING:
System.out.println("WARNING: " + toc.getMessage());
break;
default:
throw new IOException("Unsupported message type: " +
toc.getMessageType());
} else if (callbacks[i] instanceof NameCallback) {
// prompt the user for a username
NameCallback nc = (NameCallback)callbacks[i];
// ignore the provided defaultName
System.err.print(nc.getPrompt());
System.err.flush();
nc.setName("uid");
//nc.setName((new BufferedReader(new InputStreamReader(System.in))).readLine());
} else if (callbacks[i] instanceof PasswordCallback) {
// prompt the user for sensitive information
PasswordCallback pc = (PasswordCallback)callbacks[i];
pc.setPassword("pwd".toCharArray());
} else {
throw new UnsupportedCallbackException
(callbacks[i], "Unrecognized Callback");
When I try to launch client, I get the following message:
Exception in thread "main" java.lang.ClassCastException: package_test.ClientSecurityHandlerCallback cannot be cast to javax.xml.ws.handler.Handler
I have tried another approach, with
public final class ClientSecurityHandler implements SOAPHandler<SOAPMessageContext> , but I don't manage to put username in the existing uesrname/timestamp token.
How can I set uid/pwd to work with this security scheme?
Thank you
Igor

Answer 1

I have created WS client and proxy with JDeveloper 11.1.2.1 wizard. Security: oracle/wss10_username_token_with_message_protection_client_policy.
For the callback handler I use the following class (API: http://download.oracle.com/javase/6/docs/api/javax/security/auth/callback/CallbackHandler.html):
package package_test;
import java.io.IOException;
import java.text.DateFormat;
import java.util.Date;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.CallbackHandler;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import javax.security.auth.callback.TextOutputCallback;
import javax.security.auth.callback.UnsupportedCallbackException;
public class ClientSecurityHandlerCallback implements CallbackHandler{
public ClientSecurityHandlerCallback() {
super();
public void handle(Callback[] callbacks)
throws IOException, UnsupportedCallbackException {
System.out.printf("%s In Callback ClientSecurityHandlerCallback.handle\n", DateFormat.getDateTimeInstance().format(new Date()));
for (int i = 0; i < callbacks.length; i++) {
if (callbacks[i] instanceof TextOutputCallback) {
// display the message according to the specified type
TextOutputCallback toc = (TextOutputCallback)callbacks;
switch (toc.getMessageType()) {
case TextOutputCallback.INFORMATION:
System.out.println(toc.getMessage());
break;
case TextOutputCallback.ERROR:
System.out.println("ERROR: " + toc.getMessage());
break;
case TextOutputCallback.WARNING:
System.out.println("WARNING: " + toc.getMessage());
break;
default:
throw new IOException("Unsupported message type: " +
toc.getMessageType());
} else if (callbacks[i] instanceof NameCallback) {
// prompt the user for a username
NameCallback nc = (NameCallback)callbacks[i];
// ignore the provided defaultName
System.err.print(nc.getPrompt());
System.err.flush();
nc.setName("uid");
//nc.setName((new BufferedReader(new InputStreamReader(System.in))).readLine());
} else if (callbacks[i] instanceof PasswordCallback) {
// prompt the user for sensitive information
PasswordCallback pc = (PasswordCallback)callbacks[i];
pc.setPassword("pwd".toCharArray());
} else {
throw new UnsupportedCallbackException
(callbacks[i], "Unrecognized Callback");
When I try to launch client, I get the following message:
Exception in thread "main" java.lang.ClassCastException: package_test.ClientSecurityHandlerCallback cannot be cast to javax.xml.ws.handler.Handler
I have tried another approach, with
public final class ClientSecurityHandler implements SOAPHandler<SOAPMessageContext> , but I don't manage to put username in the existing uesrname/timestamp token.
How can I set uid/pwd to work with this security scheme?
Thank you
Igor