eclipse-ee4j / eclipse-ee4j/metro-wsit
Empty Body after turning on SecurityTubeFactory dump
- Dominant language
- Java
- Stars
- 6
- Forks
- 21
- Avg merge
- 10h 2m
- Merged PRs (30d)
- 1
Description
Created WS-Trust client over SSL. If the following properties are used, the message body is empty.
-Dcom.sun.xml.ws.transport.http.client.HttpTransportPipe.dump=true
-Dcom.sun.xml.wss.provider.wsit.SecurityTubeFactory.dump=true
The dumps are:
Dec 15, 2010 2:06:46 PM com.sun.xml.ws.dump.MessageDumper dump
INFO: Request message processed in Tube [ com.sun.xml.wss.jaxws.impl.SecurityClientTube ] Instance [ 5 ] Engine [ JAX-WS RI 2.2.2-hudson-101-: Stub for [https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport) ] Thread [ main ]:
[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)
uuid:03a53f84-5d08-4c7b-9350-a0e799f3b0f5
2010-12-15T22:06:46Z
2010-12-15T22:11:46Z
username
password
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)
[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)
[http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1](http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1)
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)
z8FWcJDo7tegBuG7VJQoJdHY9lWRDaaVC6WPcdCCKWs=
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)
--[HTTP request - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport]--
Accept: application/soap+xml, multipart/related
Content-Type: application/soap+xml; charset=utf-8;action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue"
User-Agent: JAX-WS RI 2.2.2-hudson-101-
[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)
uuid:03a53f84-5d08-4c7b-9350-a0e799f3b0f52010-12-15T22:06:46Z2010-12-15T22:11:46Zcctestpassword--------------------
If remove the SecurityTubeFactory dump, everything is fine and the dumps are:
--[HTTP request - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport]--
Accept: application/soap+xml, multipart/related
Content-Type: application/soap+xml; charset=utf-8;action="http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue"
User-Agent: JAX-WS RI 2.2.2-hudson-101-
[https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport](https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue)
uuid:a031d416-9516-4145-b4fb-4adb23a7db142010-12-15T22:20:11Z2010-12-15T22:25:11Zusernamepassword[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)[http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1](http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV1.1)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)JFP+PwnUNGnhq0cZx63mYH4D/woLG41DPyjxRP1UBV4=[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)--------------------
--[HTTP response - https://localhost/SecurityTokenService/CustomeSTS.svc/username_over_transport - 200]--
null: HTTP/1.1 200 OK
Content-Length: 6544
Content-Type: application/soap+xml; charset=utf-8
Date: Wed, 15 Dec 2010 22:20:11 GMT
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
[http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal](http://docs.oasis-open.org/ws-sx/ws-trust/200512/RSTRC/IssueFinal)uuid:a031d416-9516-4145-b4fb-4adb23a7db142010-12-15T22:20:12.000Z2010-12-15T22:25:12.000Z12GMx8x2GyU+dJu3DgkEnw2qsBO7tpBe/xiqHY5pGjY=2562010-12-15T22:20:11.984Z2010-12-15T22:20:41.984Z[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)[https://localhost/ws/Service1.svc/CustomEndpoint](https://localhost/ws/Service1.svc/CustomEndpoint)urn:oasis:names:tc:SAML:1.0:cm:holder-of-keyos2wUC1UMLZNW5IDuzXQ1G9luMqivOrGPYr+9ZyFlh8=cctest041CustomSTS9dOafR7ckE2NxKk9XKUHGM1HPi/PGvV62sCy3jnfJnE=H3mJeH/36PM5erUlYS7UhHLW2HsaH9V0hD/2b7EQhGIUwOFigpeQ0m7aL8/V5c5+QsTcA1qq/qjIaY8wCw8+duxcxuN00nmkgFJuN8tLyXKdazv5bZwRepS8qJatroYJg36MGzpDRbxqB77WOG9WgaMnFuZ2RWzElRv/41ITjaY=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[http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1](http://docs.oasis-open.org/ws-sx/ws-trust/200512/CK/PSHA1)_69d6ea61-3dc8-4697-9768-e5698ba698fa_69d6ea61-3dc8-4697-9768-e5698ba698faurn:oasis:names:tc:SAML:1.0:assertion[http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue](http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue)[http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey](http://docs.oasis-open.org/ws-sx/ws-trust/200512/SymmetricKey)--------------------
#### Environment
Metro 2.1-b15, WS-Trust over SSL
#### Affected Versions
[2.1]
Source: [https://github.com/javaee/metro-wsit/issues/1513](https://github.com/javaee/metro-wsit/issues/1513)
Author: glassfishrobot
Contributor guide
Research direction
Reproduce the WS-Trust-over-SSL request with both com.sun.xml.ws.transport.http.client.HttpTransportPipe.dump and com.sun.xml.wss.provider.wsit.SecurityTubeFactory.dump enabled, then compare it with SecurityTubeFactory.dump disabled. Inspect the SecurityTubeFactory and HttpTransportPipe dump paths; done means enabling the security dump no longer causes the transmitted SOAP Body to be empty.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100