org.apache.openejb.server.cxf.WSSPassThroughInterceptor Maven / Gradle / Ivy
/**
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.apache.openejb.server.cxf;
import org.apache.cxf.binding.soap.SoapMessage;
import org.apache.cxf.binding.soap.interceptor.AbstractSoapInterceptor;
import org.apache.cxf.phase.Phase;
import org.apache.wss4j.dom.WSConstants;
import javax.xml.namespace.QName;
import java.util.HashSet;
import java.util.Set;
/**
* When using JAX-WS Handler, the {@link org.apache.openejb.server.cxf.ejb.EjbInterceptor}
* adds the {@link org.apache.cxf.binding.soap.interceptor.MustUnderstandInterceptor}. OpenEJB now supports
* WS Security out of the box, so it must indicates WS Security headers have been treated. That is simply done
* using that fake interceptor.
*
* $Id$
*/
public class WSSPassThroughInterceptor extends AbstractSoapInterceptor {
private static final Set HEADERS = new HashSet();
static {
HEADERS.add(new QName(WSConstants.WSSE_NS, WSConstants.WSSE_LN));
HEADERS.add(new QName(WSConstants.WSSE11_NS, WSConstants.WSSE_LN));
HEADERS.add(new QName(WSConstants.ENC_NS, WSConstants.ENC_DATA_LN));
}
public WSSPassThroughInterceptor() {
super(Phase.PRE_PROTOCOL);
}
public WSSPassThroughInterceptor(String phase) {
super(phase);
}
@Override
public Set getUnderstoodHeaders() {
return HEADERS;
}
public void handleMessage(SoapMessage soapMessage) {
// do nothing
// this interceptor simply returns all WS-Security headers in its getUnderstoodHeaders()
// method, so that CXF does not complain that they have not been "processed"
// this is useful if you only need to look at the non-encrypted XML
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy