What is signed SOAP request SOAP request can be signed using SSL certificates. It can be use to sign multiple parts in SOAP request message like, timestamp, WSA address, user name, message body etc. Then this signed message is verified by SOAP service at server where it verifies the parts of message using the available certificates. The certificate which is used by client to sign the request, must be available at server side as a trusted certificate otherwise SOAP service will not accept the request and throw the error like "Request signed by untrusted certificate". Callback Handler We need to create the implementation of callback handler where we configure the password details for the certificate keystore. Below is an implementation of the same. public CallbackHandler keystorePasswordCallback() { return (c)->{ WSPasswordCallback pc = (WSPasswordCallback) callbacks[0]; pc.setPassword("keystore_password"); }; } WSS4J Security Interceptor...
Blogs about Java, J2ee, Multithreading, Data structure, Algorithm, Spring framework, Spring boot, Web services and open source technologies