Connecting to WS-Security protected Web Service with PHP

by

Simply extend the SoapHeader to create a Wsse compilant authentication:

class WsseAuthHeader extends SoapHeader {

private $wss_ns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";

function __construct($user, $pass, $ns = null) {
    if ($ns) {
        $this->wss_ns = $ns;
    }

    $auth = new stdClass();
    $auth->Username = new SoapVar($user, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wss_ns); 
    $auth->Password = new SoapVar($pass, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wss_ns);

    $username_token = new stdClass();
    $username_token->UsernameToken = new SoapVar($auth, SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'UsernameToken', $this->wss_ns); 

    $security_sv = new SoapVar(
        new SoapVar($username_token, SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'UsernameToken', $this->wss_ns),
        SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'Security', $this->wss_ns);
    parent::__construct($this->wss_ns, 'Security', $security_sv, true);
}
}



$wsse_header = new WsseAuthHeader($username, $password);
$x = new SoapClient('{...}', array("trace" => 1, "exception" => 0));
$x->__setSoapHeaders(array($wsse_header));

If you need to use ws-security with a nonce and a timestamp, Peter has posted an update version on http://php.net/manual/en/soapclient.soapclient.php#114976 of which he wrote that it did work for him:

class WsseAuthHeader extends SoapHeader
{
    private $wss_ns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd";
    private $wsu_ns="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";

    function __construct($user, $pass)
    {
        $created    = gmdate('Y-m-d\TH:i:s\Z');
        $nonce      = mt_rand();
        $passdigest = base64_encode(pack('H*', sha1(pack('H*', $nonce) . pack('a*', $created) . pack('a*', $pass))));

        $auth           = new stdClass();
        $auth->Username = new SoapVar($user, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wss_ns);
        $auth->Password = new SoapVar($pass, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wss_ns);
        $auth->Nonce    = new SoapVar($passdigest, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wss_ns);
        $auth->Created  = new SoapVar($created, XSD_STRING, NULL, $this->wss_ns, NULL, $this->wsu_ns);

        $username_token                = new stdClass();
        $username_token->UsernameToken = new SoapVar($auth, SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'UsernameToken', $this->wss_ns);

        $security_sv = new SoapVar(
            new SoapVar($username_token, SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'UsernameToken', $this->wss_ns),
            SOAP_ENC_OBJECT, NULL, $this->wss_ns, 'Security', $this->wss_ns);
        parent::__construct($this->wss_ns, 'Security', $security_sv, true);
    }
}

compare as well with the details given in answer https://stackoverflow.com/a/18575154/367456

More Related Contents:

  1. PHP SOAP client that understands multi-part messages?
  2. converting SOAP XML response to a PHP object or array
  3. How to build a correct SOAP request with PHP
  4. How to make a PHP SOAP call using the SoapClient class
  5. Call a REST API in PHP
  6. SOAP request in PHP with CURL
  7. REST API – why use PUT DELETE POST GET?
  8. How to parse SOAP XML?
  9. SOAP-ERROR: Parsing WSDL: Couldn’t load from – but works on WAMP
  10. How can I get the client’s IP address in a PHP webservice? [duplicate]
  11. SOAP PHP fault parsing WSDL: failed to load external entity?
  12. Tell bots apart from human visitors for stats?
  13. Disable certificate verification in PHP SoapClient
  14. How to easily consume a web service from PHP
  15. How to convert SOAP response to PHP Array?
  16. In PHP how can you clear a WSDL cache?
  17. is there a good PHP geolocation service? [closed]
  18. How do I install soap extension?
  19. pass arraylist bean from android to webservice php
  20. WSDL to PHP with Basic Auth
  21. How do I enable –enable-soap in php on linux?
  22. How to get info on sent PHP curl request
  23. SoapFault exception: Could not connect to host
  24. Upload Images On Twitter Using PHP
  25. Coverting Hex to Image in PHP?
  26. How do I see the actual XML generated by PHP SOAP Client Class?
  27. Inspect XML created by PHP SoapClient call before/without sending the request
  28. Unique key generation
  29. How to parse SOAP response without SoapClient
  30. How can I send SOAP XML via Curl and PHP?

Leave a Comment