Skip to content

wsse does not sign parts required by WSDL #497

Open
@andreixk

Description

@andreixk

If the WSDL file specifies the document parts that need to be signed, as in example below, the signature.py module doesn't sign any of them except for Body and Timestamp (which are hard coded for some reason)

<sp:SignedParts xmlns="http://schemas.xmlsoap.org/wsdl/" xmlns:ebs="http://ebs.health.ontario.ca/" xmlns:hcv="http://hcv.health.ontario.ca/" xmlns:idp="http://idp.ebs.health.ontario.ca/" xmlns:msa="http://msa.ebs.health.ontario.ca/" xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:sp="http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512" xmlns:wsdlsoap="http://schemas.xmlsoap.org/wsdl/soap/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
	<sp:Header Name="EBS" Namespace="http://ebs.health.ontario.ca/"/>
	<sp:Header Name="MSA" Namespace="http://msa.ebs.health.ontario.ca/"/>
	<sp:Header Name="Timestamp" Namespace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"/>
	<sp:Header Name="UsernameToken" Namespace="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"/>
	<sp:Body/>
</sp:SignedParts>

Activity

mvantellingen

mvantellingen commented on Jul 23, 2017

@mvantellingen
Owner

Ah interesting, it is indeed hardcoded currently. Are you able to open a PR to implement this?

ba1dr

ba1dr commented on Oct 12, 2021

@ba1dr

What a pity that this feature has not been merged yet. Any chance to have it done soon?

linked a pull request that will close this issue on Sep 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      Participants

      @mvantellingen@ba1dr@andreixk

      Issue actions

        wsse does not sign parts required by WSDL · Issue #497 · mvantellingen/python-zeep