Ws-security

[mjhaugsdal]

Hi, got the following code in my webservice class

@Produces
public WSS4JInInterceptor getWSS4JInInterceptor() {
    Map<String, Object> inProps = new HashMap<String, Object>();
    inProps.put(ConfigurationConstants.ACTION, WSHandlerConstants.USERNAME_TOKEN);
    inProps.put(ConfigurationConstants.PASSWORD_TYPE, WSHandlerConstants.USERNAME_TOKEN);
    inProps.put(ConfigurationConstants.PW_CALLBACK_CLASS, KeyStoreCallback.class.getName());
    return new WSS4JInInterceptor(inProps);
}

And the following application properties:

quarkus.cxf.path=/
quarkus.cxf.endpoint."/webservice".implementor="io.quarkiverse.it.cxf.WebServiceImpl"
quarkus.cxf.endpoint."/webservice".features=org.apache.cxf.feature.LoggingFeature
quarkus.cxf.endpoint."/webservice".in-interceptors=org.apache.cxf.ws.security.wss4j.WSS4JInInterceptor

But when calling webservice method:

@Override
public String hello(@WebParam(name = "text") String hello) {
    return "hello, " + hello;
}

it still works without authentication. I attached a debugger and it seems the getWSS4jInInterceptor method never runs. Something essential missing in the configuration? Any annotations?

[shumonsharif]

Hello, would it be possible to share your project that demonstrates the issue?

[mjhaugsdal]

Hi, not sure what was the issue, really. I did some restructuring, and now it works.