Username Token over Transport - Security WS-Policy
<wsp:Policy wsu:Id="UTOverTransport" | |
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" | |
xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy"> | |
<wsp:ExactlyOne> | |
<wsp:All> | |
<sp:TransportBinding xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"> | |
<wsp:Policy> | |
<sp:TransportToken> | |
<wsp:Policy> | |
<sp:HttpsToken RequireClientCertificate="false"/> | |
</wsp:Policy> | |
</sp:TransportToken> | |
<sp:AlgorithmSuite> | |
<wsp:Policy> | |
<sp:Basic256/> | |
</wsp:Policy> | |
</sp:AlgorithmSuite> | |
<sp:Layout> | |
<wsp:Policy> | |
<sp:Lax/> | |
</wsp:Policy> | |
</sp:Layout> | |
<sp:IncludeTimestamp/> | |
</wsp:Policy> | |
</sp:TransportBinding> | |
<sp:SignedSupportingTokens | |
xmlns:sp="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy"> | |
<wsp:Policy> | |
<sp:UsernameToken | |
sp:IncludeToken="http://schemas.xmlsoap.org/ws/2005/07/securitypolicy/IncludeToken/AlwaysToRecipient"/> | |
</wsp:Policy> | |
</sp:SignedSupportingTokens> | |
</wsp:All> | |
</wsp:ExactlyOne> | |
</wsp:Policy> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment