[WSS-398] Can't create a UsernameToken without a password

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6.6
• Fix Version/s: 1.6.7
• Component/s: WSS4J Handlers
• Assignee: Colm O hEigeartaigh
• Reporter: Dan Price
• Created: 18/Jul/12 20:01
• Updated: 31/Jul/12 16:36
• Resolved: 19/Jul/12 15:09

Description

"WSHandler: application provided null or empty password" message when trying to send a UsernameToken with passwordType == PasswordNone.

Seems to be happening because WSHandler doesn't rcognize this as possible, even though password is optional.

This is a regression of sorts, as this same problem was fixed in previous versions. The UsernameToken.setPassword method has a check to allow this, but the getPasswordCB method is checking before this and claiming it's an error.