AnsweredAssumed Answered

Removing nonce from test case security header

Question asked by RogerSun62352659 on Nov 17, 2015

My team is performance testing, and we're encountering authentication issues. Apparently the presence of the nonce in the security header is causing issues, and that removing it will fix the issue. However, within the test case editor I do not see a way to edit the sent message on that level.

 

  <soapenv:Header>

    <wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">

      <wsse:UsernameToken xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="UsernameToken-1782695655">

        <wsse:Username>[...]</wsse:Username>

        <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">[...]</wsse:Password>

        <wsse:Nonce EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">gY+A1SrgtqwEysRpbJyxKw==</wsse:Nonce>

        <wsu:Created>2015-11-17T16:48:13.020Z</wsu:Created>

      </wsse:UsernameToken>

    </wsse:Security>

  </soapenv:Header>

 

  <soapenv:Body>

          [...]

  </soapenv:Body>

</soapenv:Envelope>

Outcomes