After Adding WSS Username token in SoapUI getting Error already seen before for user name

, , ,
1

I am testing it in my local:

Request :
<soapenv:Envelope xmlns:imp=“http://localhost/Implementation_WSS.ws:testWSS_wsd” xmlns:soapenv=“http://schemas.xmlsoap.org/soap/envelope/”>
soapenv:Header
<wsse:Security soapenv:mustUnderstand=“1” xmlns:wsse=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd” xmlns:wsu=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd”>
<wsse:UsernameToken wsu:Id=“UsernameToken-8606EDC2BD182CBE9316916507785762”>
wsse:UsernameAdministrator</wsse:Username>
<wsse:Password Type=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText”>manage</wsse:Password>
<wsse:Nonce EncodingType=“http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary”>6ieXD99WplEsWXnrpMPeAA==</wsse:Nonce>
wsu:Created2023-08-10T06:59:38.576Z</wsu:Created>
</wsse:UsernameToken>
</wsse:Security>
</soapenv:Header>
soapenv:Body
imp:test_WSS
This is ***********************WSS
</imp:test_WSS>
</soapenv:Body>
</soapenv:Envelope>

Response

<soapenv:Envelope xmlns:soapenv=“http://schemas.xmlsoap.org/soap/envelope/”>
soapenv:Body
soapenv:Fault
wsse:InvalidSecurity
API Gateway encountered an error. Error Message: Nonce value : 6ieXD99WplEsWXnrpMPeAA==, already seen before for user name : Administrator. Possibly this could be a replay attack… Request Details: Service - test_WSS, Operation - test_WSS, Invocation Time:9:59:51 AM, Date:Aug 10, 2023, Client IP - 192.168.10.200, User - Default and Application:null
</soapenv:Fault>
</soapenv:Body>
</soapenv:Envelope>

2

Did you check this topic?

1 Like
3

Thanks for the response.

1 Like
4

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.