[CXF-7677] With CXF 3.2.1, using UsernameToken, cannot receive password in callback

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Not A Problem
• Affects Version/s: 3.2.1
• Component/s: WS-* Components

Environment

Java 8.

CXF 3.2.1

wss4j-2.1.jar

xmlsec-2.1.0.jar

• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Sumeet Mahajan
• Created: 12/Mar/18 22:07
• Updated: 18/Sep/23 18:49
• Resolved: 13/Mar/18 10:36

Description

I am attaching my SOAP request.

It has SOAP Header with usernametoken which also has username and password in plain text.

I wrote a CallbackHandler to receive this username and password on server.

I used to get the username and password in cxf 2.7.6 in my callbackhandler. Whereas in cxf 3.2.1 I am no longer getting password. Its coming in as null. I did follow the new classes (WSPasswordCallback) and changed the package etc.