handle
method shall provide. The WSPasswordCallback
class defines the following usage codes: UNKNOWN
- an unknown usage. Never used by the WSS4J implementation and shall be treated as an error by the handle
method.DECRYPT
- need a password to get the private key of this identifier (username) from the keystore. WSS4J uses this private key to decrypt the session (symmetric) key. Because the encryption method uses the public key to encrypt the session key it needs no password (a public key is usually not protected by a password).USERNAME_TOKEN
- need the password to fill in or to verify a UsernameToken
.SIGNATURE
- need the password to get the private key of this identifier (username) from the keystore. WSS4J uses this private key to produce a signature. The signature verification uses the public key to verify the signature.KEY_NAME
- need the key, not the password, associated with the identifier. WSS4J uses this key to encrypt or decrypt parts of the SOAP request. Note, the key must match the symmetric encryption/decryption algorithm specified (refer to {@link org.apache.ws.security.handler.WSHandlerConstants#ENC_SYM_ALGO}).USERNAME_TOKEN_UNKNOWN
- either an not specified password type or a password type passwordText. In these both cases only the password variable is set. The callback class now may check if the username and password match. If they don't match the callback class must throw an exception. The exception can be a UnsupportedCallbackException or an IOException.SECURITY_CONTEXT_TOKEN
- need the key to to be associated with a wsc:SecurityContextToken
.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|