Forum Discussion

JGodfrey's avatar
JGodfrey
New Contributor
12 years ago

WS Security UsernameToken– PasswordDigestExt and Base64

Hi all, The password digest of the UsernameToken when using the SOAPUI PasswordDigestExt has an extra base64 encoding when compared to the OASIS standard. See line 174 of the OASIS UsernameToken...
gokussx4's avatar
gokussx4
New Contributor
8 years ago

I ran across your post as I was in need of an older password digest algorithm when communicating with Amadeus Web Services (WBS). After diving through some articles on WSE and SoapUI I think this may just be a simple bug based on how I believe this was intended to be used.

 

A SoapUi article describes PasswordDigestExt "The PasswordDigestExt option is non-standard and should only be used for interop issues where the message receiver desires an extra SHA-1 Hash of the password."

https://www.soapui.org/soapui-projects/ws-security.html