postman-wsse-pre-request.js

pre-request.js

// set `wsse-user` and `wsse-secret` variables in
// your Postman environment
const user = pm.environment.get("wsse-user");
const secret = pm.environment.get("wsse-secret");

const header = getWsseHeader(user, secret);

pm.environment.set("wsse-header", header);

function sha1hex(str) {
    const hash = CryptoJS.SHA1(str);

    return hash.toString(CryptoJS.enc.Hex);
}

function base64Sha1(str) {
  const hexDigest = sha1hex(str);

  return Buffer.from(hexDigest).toString("base64");
}

function iso8601(time) {
    return time.toISOString().split('.')[0] + 'Z';
}

function getWsseHeader(user, secret) {
  const timestamp = iso8601(new Date())
  const nonceSalt = "I'm your big secret";
  const nonce = sha1hex(timestamp + nonceSalt);

  const digest = base64Sha1(nonce + timestamp + secret);

  return `UsernameToken Username="${user}", PasswordDigest="${digest}", Nonce="${nonce}", Created="${timestamp}"`;
}