Configuring Username Token Profile

PAPI Web Service can use Web Services Security Username Token Profile to authenticate the client. The following procedures show you how to configure Username Token Profile for PAPI Web Service.

• Edit PAPI Web Service configuration and select the Username Token Profile authentication option. See Editing PAPI Web Service Configuration . The next time you start PAPI Web Service application, Username Token Profile authentication is activated.
• Configure your web services client to send the Username Token SOAP header when it authenticates against PAPI Web Service. The way of doing this depends on the programming language and the stack used to code your client.
  For example, for a client using Java JAX-WS stack you need to add the following method, and invoke it before executing any operation.

                              
  import javax.xml.soap.SOAPElement;
  import javax.xml.soap.SOAPException;
  import javax.xml.soap.SOAPFactory;
  import com.sun.xml.ws.api.message.Header;
  import com.sun.xml.ws.api.message.Headers;
  import com.sun.xml.ws.developer.WSBindingProvider;
  
  //...
  
      private static final String SECURITY_NAMESPACE = "http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
  
  //...
  
  private static void addUserNameTokenProfile(PapiWebService papiWebServicePort)
          throws SOAPException {
      SOAPFactory soapFactory = SOAPFactory.newInstance();
      QName securityQName = new QName(SECURITY_NAMESPACE, "Security");
      SOAPElement security = soapFactory.createElement(securityQName);
      QName tokenQName = new QName(SECURITY_NAMESPACE, "UsernameToken");
      SOAPElement token = soapFactory.createElement(tokenQName);
      QName userQName = new QName(SECURITY_NAMESPACE, "Username");
      SOAPElement username = soapFactory.createElement(userQName);
      username.addTextNode("test");
      QName passwordQName = new QName(SECURITY_NAMESPACE, "Password");
      SOAPElement password = soapFactory.createElement(passwordQName);
      password.addTextNode("test");
      token.addChildElement(username);
      token.addChildElement(password);
      security.addChildElement(token);
      Header header = Headers.create(security);
      ((WSBindingProvider) papiWebServicePort).setOutboundHeaders(header);
  }
  
  //...