Uploaded image for project: 'Rampart'
  1. Rampart
  2. RAMPART-166

Wrong SoapFault code accessing a Secure endpoint without security

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.4
    • 1.4
    • rampart-core
    • None
    • Axis2 1.4. Rampart branch_1_4.

    Description

      Hi!

      If I send a request without Security to an Axis2/Rampart endpoint requiring Security the Fault Code is set to 'Receiver' :

      <soapenv:Fault>
      <soapenv:Code>
      <soapenv:Value>soapenv:Receiver</soapenv:Value>
      <soapenv:Subcode>
      <soapenv:Value xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">wsse:InvalidSecurity</soapenv:Value>
      </soapenv:Subcode>
      </soapenv:Code>
      <soapenv:Reason>
      <soapenv:Text xml:lang="en-US">Missing wsse:Security header in request</soapenv:Text>
      </soapenv:Reason>
      </soapenv:Fault>

      Is Rampart not expected to return 'Sender' - to indicate that the client is not configured correctly ?

      /hans

      Attachments

        Issue Links

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            nandana.cse Nandana Mihindukulasooriya
            hgk.lenio Hans G Knudsen
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment