BPEL Username Token with Password Digest, Nonce and Creation Timestamp
585594Oct 24 2007 — edited Oct 25 2007We have to invoke a secure webservice from BPEL using a username token.
Hi All,
I need to invoke a secure webservice from my bpel process using the username token.
The password is going to be in digest format and generated as below
(SHA-1(Nonce+CreatedTimeStamp+password))
I need to pass the username, passwordDigest, Nonce and Creation Date to the target service in a standard wsse:Security header.
1. Is this possible in BPEL?
Is there a way I can intercept the BPEL message and add SOAP Security headers?
It would be of great help if anyone can share similar experiences with us.
Thanks in advance.
Regards,
Ud