Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PHP ActiveX) SOAP WS-Security UsernameTokenDemonstrates how to add a UsernameToken with the WSS SOAP Message Security header. Note: This example requires Chilkat v9.5.0.66 or later.
<?php // This example requires the Chilkat Crypt API to have been previously unlocked. // See Unlock Chilkat Crypt for sample code. // An HTTP SOAP request is an HTTP request where the SOAP XML composes the body. // This example demonstrates how to add a WS-Security header such as the following: // // <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="SecurityToken-6138db82-5a4c-4bf7-915f-af7a10d9ae96"> // <wsse:Username>user</wsse:Username> // <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">CBb7a2itQDgxVkqYnFtggUxtuqk=</wsse:Password> // <wsse:Nonce>5ABcqPZWb6ImI2E6tob8MQ==</wsse:Nonce> // <wsu:Created>2010-06-08T07:26:50Z</wsu:Created> // </wsse:UsernameToken> // // First build some simple SOAP XML that has some header and body. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Xml') $xml = new COM("Chilkat.Xml"); $xml->Tag = 'env:Envelope'; $xml->AddAttribute('xmlns:env','http://www.w3.org/2003/05/soap-envelope'); $xml->UpdateAttrAt('env:Header|n:alertcontrol',1,'xmlns:n','http://example.org/alertcontrol'); $xml->UpdateChildContent('env:Header|n:alertcontrol|n:priority','1'); $xml->UpdateChildContent('env:Header|n:alertcontrol|n:expires','2001-06-22T14:00:00-05:00'); $xml->UpdateAttrAt('env:Body|m:alert',1,'xmlns:m','http://example.org/alert'); $xml->UpdateChildContent('env:Body|m:alert|m:msg','Pick up Mary at school at 2pm'); print $xml->getXml() . "\n"; print '----' . "\n"; // The following SOAP XML is built: // <env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope"> // <env:Header> // <n:alertcontrol xmlns:n="http://example.org/alertcontrol"> // <n:priority>1</n:priority> // <n:expires>2001-06-22T14:00:00-05:00</n:expires> // </n:alertcontrol> // </env:Header> // <env:Body> // <m:alert xmlns:m="http://example.org/alert"> // <m:msg>Pick up Mary at school at 2pm</m:msg> // </m:alert> // </env:Body> // </env:Envelope> // // Now build the WSSE XML housing that we'll insert into the above SOAP XML at the end. // <wsse:Security> // <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="WSU_ID"> // <wsse:Username>USERNAME</wsse:Username> // <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">PASSWORD_DIGEST</wsse:Password> // <wsse:Nonce>NONCE</wsse:Nonce> // <wsu:Created>CREATED</wsu:Created> // </wsse:UsernameToken> // </wsse:Security> // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Xml') $wsse = new COM("Chilkat.Xml"); $wsse->Tag = 'wsse:Security'; $wsse->UpdateAttrAt('wsse:UsernameToken',1,'xmlns:wsu','http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'); $wsse->UpdateAttrAt('wsse:UsernameToken',1,'wsu:Id','WSU_ID'); $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Username','USERNAME'); $wsse->UpdateAttrAt('wsse:UsernameToken|wsse:Password',1,'Type','http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest'); $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Password','PASSWORD_DIGEST'); $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Nonce','NONCE'); $wsse->UpdateChildContent('wsse:UsernameToken|wsu:Created','CREATED'); print $wsse->getXml() . "\n"; print '----' . "\n"; // Insert the wsse:Security XML into the existing SOAP header: // xHeader is a Chilkat.Xml $xHeader = $xml->GetChildWithTag('env:Header'); $xHeader->AddChildTree($wsse); // Now show the SOAP XML with the wsse:Security header added: print $xml->getXml() . "\n"; print '----' . "\n"; // Now our XML looks like this: // <env:Envelope xmlns:env="http://www.w3.org/2003/05/soap-envelope"> // <env:Header> // <n:alertcontrol xmlns:n="http://example.org/alertcontrol"> // <n:priority>1</n:priority> // <n:expires>2001-06-22T14:00:00-05:00</n:expires> // </n:alertcontrol> // <wsse:Security> // <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="WSU_ID"> // <wsse:Username>USERNAME</wsse:Username> // <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">PASSWORD_DIGEST</wsse:Password> // <wsse:Nonce>NONCE</wsse:Nonce> // <wsu:Created>CREATED</wsu:Created> // </wsse:UsernameToken> // </wsse:Security> // </env:Header> // <env:Body> // <m:alert xmlns:m="http://example.org/alert"> // <m:msg>Pick up Mary at school at 2pm</m:msg> // </m:alert> // </env:Body> // </env:Envelope> // // ----------------------------------------------------- // Now let's fill-in-the-blanks with actual information... // ----------------------------------------------------- $wsu_id = 'Example-1'; $wsse->UpdateAttrAt('wsse:UsernameToken',1,'wsu:Id',$wsu_id); $password = 'password'; $username = 'user'; $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Username',$username); // The nonce should be 16 random bytes. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Prng') $prng = new COM("Chilkat.Prng"); // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.BinData') $bd = new COM("Chilkat.BinData"); // Generate 16 random bytes into bd. // Note: The GenRandomBd method is added in Chilkat v9.5.0.66 $prng->GenRandomBd(16,$bd); $nonce = $bd->getEncoded('base64'); $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Nonce',$nonce); // Get the current date/time in a string with this format: 2010-06-08T07:26:50Z // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.CkDateTime') $dt = new COM("Chilkat.CkDateTime"); $dt->SetFromCurrentSystemTime(); $bLocal = 0; $created = $dt->getAsTimestamp($bLocal); $wsse->UpdateChildContent('wsse:UsernameToken|wsu:Created',$created); // The password digest is calculated like this: // Password_Digest = Base64 ( SHA-1 ( nonce + created + password ) ) $bd->AppendString($created,'utf-8'); $bd->AppendString($password,'utf-8'); // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Crypt2') $crypt = new COM("Chilkat.Crypt2"); $crypt->HashAlgorithm = 'SHA-1'; $crypt->EncodingMode = 'base64'; // Note: The HashBdENC method is added in Chilkat v9.5.0.66 $passwordDigest = $crypt->hashBdENC($bd); $wsse->UpdateChildContent('wsse:UsernameToken|wsse:Password',$passwordDigest); // Examine the final SOAP XML with WS-Security header added. print $xml->getXml() . "\n"; ?> |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.