Don't include Nonce and Created for PasswordText #131
Conversation
|
fix released with v0.8.3. thank you very much! |
renamed Savon::WSSE#password_value to Savon::WSSE#digest_password and removed the raise when accessed for PasswordText authentication because it's a private method.
|
Hi Daniel (s:Sender) The message with Action '' cannot be processed at the receiver, due to a ContractFilter mismatch at the EndpointDispatcher. This may be because of either a contract mismatch (mismatched Actions between sender and receiver) or a binding/security mismatch between the sender and the receiver. Check that sender and receiver have the same contract and the same binding (including security requirements, e.g. Message, Transport, None). (Savon::SOAPFault) my wsdl: https://fmsextapi.scania.com/externalinterface/wsdl/Positioning.wsdl in documentation it requires both ssl (not mentioned the version) and wsse authentication with password type text |
|
Hi, I solved it. |
Before this change, Savon sends Nonce and Created whether the password type is PasswordText or PasswordDigest.
However, according to http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0.pdf (line 173 on page 9), Nonce and Created should not be sent for PasswordText, and the SOAP server which we are using actually rejects the request if you send Nonce and Created on PasswordText.