Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Intended Audience
• How to Use This Guide
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide

• New and Changed Features for Release 12c (12.2.1.1)
• New and Changed Features for Release 12c (12.2.1)
• New and Changed Features for Release 12c (12.1.3)
• New and Changed Features for Release 12c (12.1.2)

1 Understanding Policies and Assertions in Oracle Web Services Manager

• 1.1 About Predefined Policies and Assertions
• 1.2 About Web Service Policies Creation
• 1.3 Understanding Custom Assertions
  • 1.3.1 About Policies, Assertions, Expressions, and Operators
  • 1.3.2 About Policy Combinations
    • 1.3.2.1 Combining a Policy with an Assertion
    • 1.3.2.2 Combining a Policy with Two Assertions and wsp:All Operator
    • 1.3.2.3 Combining a Policy with Many Assertions and wsp:ExactlyOne Operator
  • 1.3.3 Supported Custom Assertion Categories
  • 1.3.4 About the Rules for Binding Custom Assertions
  • 1.3.5 About the Life Cycle of a Custom Assertion
  • 1.3.6 Understanding the Types of Custom Assertions
    • 1.3.6.1 Understanding Simple Assertions
      • 1.3.6.1.1 Rules for Using Simple Assertions
      • 1.3.6.1.2 Defining a Pseudo-schema for Simple Assertions
    • 1.3.6.2 Understanding Multi-Element Simple Assertions
      • 1.3.6.2.1 Rules for Using Multi-element Simple Assertions
      • 1.3.6.2.2 Defining a Pseudo-schema for Multi-element Simple Assertions

2 Creating Custom Assertions

• 2.1 About Policy Name
• 2.2 Developing Custom Assertions for Web Service
  • 2.2.1 Creating the Custom Assertion Executor
  • 2.2.2 Creating the Custom Policy File
  • 2.2.3 Specifying the Custom Assertion Executor
    • 2.2.3.1 Specifying the Custom Assertion Executor in the Custom Policy File
    • 2.2.3.2 Specifying the Custom Assertion Executor in the policy-config.xml File
      • 2.2.3.2.1 About the Policy Configuration File
      • 2.2.3.2.2 Defining the Policy Configuration File
  • 2.2.4 Creating the Custom Assertion JAR File
  • 2.2.5 Adding the Custom Policy to the Policy Store
    • 2.2.5.1 Adding a Custom Policy to the Policy Store Using Fusion Middleware Control
    • 2.2.5.2 Adding a Custom Policy to the Policy Store Using WLST
  • 2.2.6 Deploying the Custom Assertion
  • 2.2.7 Attaching the Custom Policy to a Web Service
• 2.3 Testing the Web Service

3 Managing Sample Custom Assertions

• 3.1 Validating IP Address in Custom Assertion
  • 3.1.1 Validating IP Address Using Custom Assertion Executor
  • 3.1.2 Validating IP Address Using Policy File
  • 3.1.3 Validating IP Address Using policy-config.xml File
  • 3.1.4 Validating IP Address Using Web Service
  • 3.1.5 Validating IP Address Using JSE Client
• 3.2 Performing IP Address Validation in Custom Assertion
• 3.3 Encrypting and Decrypting Data in Custom Assertion
  • 3.3.1 Encrypting and Decrypting Data Using Custom Assertion Executor
  • 3.3.2 Encrypting Elements of an Inbound Message Using Custom Assertion Executor
  • 3.3.3 Decrypting Elements of an Outbound Message Using Custom Assertion Executor
  • 3.3.4 Encrypting Data Using Custom Assertion Executor
  • 3.3.5 Decrypting Data Using Custom Assertion Executor
  • 3.3.6 Receiving the Encrypted Message Using Composite Application
  • 3.3.7 Receiving the Decrypted Message Using Composite Application
• 3.4 Performing Data Encryption and Decryption in Custom Assertion
• 3.5 Authenticating a User in Custom Assertion
  • 3.5.1 Authenticating Using Custom Assertion Executor
  • 3.5.2 Authenticating Using Policy File
  • 3.5.3 Implementing User Authentication Using Files
    • 3.5.3.1 Authenticating Using Login Configuration File
    • 3.5.3.2 Implementing a Custom Login Module Class
    • 3.5.3.3 Implementing a Simple Login Module Class
    • 3.5.3.4 Implementing a Callback Handler Class
• 3.6 Performing User Authentication in Custom Assertion

4 Implementing Advanced Features in Custom Assertions

• 4.1 Supplying Parameters for Custom Assertions
  • 4.1.1 About Custom Assertion Interfaces
  • 4.1.2 Inputting Parameters to Custom Assertions
• 4.2 Examining OWSM Context Properties
  • 4.2.1 About OWSM Context Properties Interfaces
  • 4.2.2 Accessing OWSM Context Properties
• 4.3 Accessing OWSM Custom Security Assertion
  • 4.3.1 About OWSM Custom Security Assertion Stages
  • 4.3.2 About OWSM Custom Security Assertion Interfaces
  • 4.3.3 Accessing Request, Response, and Fault Message Objects
• 4.4 Accessing Parts of a Message Using XPath
  • 4.4.1 About XPath Expression
  • 4.4.2 Identifying the Value of a Node
  • 4.4.3 Adding a Namespace to Namespace Context
  • 4.4.4 Retrieving the Value of a Node
• 4.5 Retrieving Certificates Used by Container for SSL
• 4.6 Accessing Transport Properties
• 4.7 Accessing Credential Store Framework Keys
• 4.8 Handling Exceptions in Custom Assertions
  • 4.8.1 About WSMException Method
  • 4.8.2 Processing Exceptions in WSMException

A Custom Assertions Schema Reference

• A.1 Element Hierarchy of Custom Assertions in a WS-Policy File
• A.2 Custom Assertion Elements
  • A.2.1 wsp:Policy
  • A.2.2 orasp:Assertion
  • A.2.3 orawsp:bindings
  • A.2.4 orawsp:Implementation
  • A.2.5 orawsp:Config
  • A.2.6 orawsp:PropertySet
  • A.2.7 orawsp:Property
  • A.2.8 orawsp:Description
  • A.2.9 orawsp:Value