Allow fault responses to be secured [SWS-519]

[gregturn]

Paul Nyheim opened SWS-519 and commented

AbstractWsSecurityInterceptor should allow fault responses to be secured.

WCF clients seem to require that responses are secured - at least with Timestamp, so we had to subclass Wss4jSecurityInterceptor and override handleFault so that fault responses could be secured. I suggest that this is implemented in AbstractWsSecurityInterceptor in the same way that handleRequest is implemented, where a property, secureFault, will enable/disable this feature. And by setting it to false by default, backwards compatibility is ensured.

I'll upload a patch for this shortly.

---

Affects: 1.5.7

Attachments:

• AbstractWsSecurityInterceptor should allow fault responses to be secured2.patch (2.45 kB)

1 votes, 1 watchers

[gregturn]

Paul Nyheim commented

patch of improvement - made against v1.5.7

[snicoll]

When looking at this, org.springframework.ws.soap.security.wss4j2.Wss4jInterceptorTest#testHandleResponse can be used to test this feature on a fault.