Web service security: Unable to extract username / password from soapheader

Question

Hi All,
For a webservice, we have implemented basic authentication (plain text password) using jdeveloper wizard. We are successfully getting the textbox for username and password. However, the problem is when trying to extract the username and password from the soapHeader on the server side.
Here is the soap message:
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.dubaitrade.ae"><soap:Header><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" mustUnderstand="1"><wsse:UsernameToken><wsse:Username>testuser</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">testpass</wsse:Password></wsse:UsernameToken></wsse:Security></soap:Header>
<soap:Body>
<ns:processValidateCust>
<paymentMethod>cash</paymentMethod>
</ns:processValidateCust>
</soap:Body>
</soap:Envelope>
Here is the sample java file:
public class ValidateCustImpl implements javax.xml.rpc.server.ServiceLifecycle {
ServletEndpointContext ctx;
public String processValidateCust(String paymentMethod) {
if (ctx != null) {
SOAPMessageContext context =
(SOAPMessageContext)ctx.getMessageContext();
try {
SOAPHeader header =
context.getMessage().getSOAPPart().getEnvelope().getHeader();
System.out.println(header.getNamespaceURI() + " " +header.toString());
} catch (SOAPException x) {
System.out.println("Exception" + x);
x.printStackTrace();
Here is the output:
NamespaceURI for header is:http://schemas.xmlsoap.org/soap/envelope/
and the header is:<soap:Header xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"/>
However, if i "Inspect" the header in "debug" mode in jdev, i do see the strings i had passed.
Name     Value     Type
- header     soap:Header     Header11
+ headerExtensionContext          HeaderExtensionContext
defaultNs     null     String
name     null     Name
childrenNeedUpdate     false     boolean
nodeId     21474836507     long
flags     1     int
- data          Object[1024]
     + [43]     wsse:Security     HeaderElement11
+ [44]     xmlns:wsse     QxName
+ [45]     "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"     String
+ [46]          XMLAttr
+ [49]     wsse:Security     HeaderElement11
+ [50]     mustUnderstand     QxName
+ [51]     "1"     String
+ [55]     wsse:Security     HeaderElement11
+ [56]     wsse:UsernameToken     QxName
- [60]     wsse:Username     Element11
defaultNs     null     String
name     null     Name
childrenNeedUpdate     false     boolean
nodeId     42949673023     long
flags     1     int
+ data          Object[1024]
+ [61]     wsse:Password     Element11
+ [63]     wsse:UsernameToken     Element11
+ [64]     wsse:Username     QxName
+ [66]     wsse:Password     Element11
+ [68]          TextImpl
+ [69]          TextImpl
+ [71]     wsse:Username     Element11
+ [72]     "testuser"     char[3]
+ [75]     wsse:UsernameToken     Element11
Any idea how do i extract this username from the header?
TIA,
abbas

Answer 1

Can someone help here please?