[WSS-131] no support for extension of SecurityHeader

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.7
• Fix Version/s: 1.5.8, 1.6
• Component/s: WSS4J Handlers
• Assignee: Colm O hEigeartaigh
• Reporter: Lisa Penninger
• Created: 01/Jul/08 18:42
• Updated: 25/Jun/09 11:37
• Resolved: 25/Jun/09 11:37

Description

The WSS SecurityHeader schema definition is extensible to allow different types of security information to be included, i.e., I could define a FooToken in my schema and include it in the SecurityHeader in addition to my UsernameToken. However, wss4j seems to actively prevent this, throwing an exception if an unrecognized token is found.