You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by ru...@apache.org on 2005/08/29 17:16:12 UTC

svn commit: r264155 - in /webservices/axis/trunk/java/modules: integration/ integration/test-resources/security/ integration/test/org/apache/axis2/security/ security/ security/interop/org/apache/axis2/security/ security/src/org/apache/axis2/security/ s...

Author: ruchithf
Date: Mon Aug 29 08:15:45 2005
New Revision: 264155

URL: http://svn.apache.org/viewcvs?rev=264155&view=rev
Log:
Security module - Interop client and  test case added

Added:
    webservices/axis/trunk/java/modules/integration/test-resources/security/
    webservices/axis/trunk/java/modules/integration/test-resources/security/s1.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s1.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s2.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s2.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s3.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s3.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s4.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s4.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s5.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s5.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s6.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s6.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s7.client.axis2.xml
    webservices/axis/trunk/java/modules/integration/test-resources/security/s7.service.axis2.xml
    webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/
    webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/InteropTestBase.java
    webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/Scenario1Test.java
    webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/
    webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/InteropScenarioClient.java
    webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/PWCallback.java
Modified:
    webservices/axis/trunk/java/modules/integration/maven.xml
    webservices/axis/trunk/java/modules/integration/project.xml
    webservices/axis/trunk/java/modules/security/maven.xml
    webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllReceiver.java
    webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllSender.java
    webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/util/Axis2Util.java

Modified: webservices/axis/trunk/java/modules/integration/maven.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/maven.xml?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/integration/maven.xml (original)
+++ webservices/axis/trunk/java/modules/integration/maven.xml Mon Aug 29 08:15:45 2005
@@ -73,8 +73,37 @@
         <mkdir dir="target/groovyRepo/modules"/>
         <ant:copy file="../samples/target/samples/groovyService.aar" tofile="target/groovyRepo/services/groovyService.aar"/>   
         <copy file="../addressing/target/addressing.mar"
-            tofile="target/groovyRepo/modules/addressing.mar"/>
-    
+            tofile="target/groovyRepo/modules/addressing.mar"/>
+
+	<!--Axis2 repositories for WS-Security interop tests -->
+
+	<!-- Scenario 1 -->
+        <mkdir dir="target/test-resources/scenario1_client_repo"/>
+        <mkdir dir="target/test-resources/scenario1_client_repo/modules"/>
+        <mkdir dir="target/test-resources/scenario1_client_repo/services"/>
+
+        <mkdir dir="target/test-resources/scenario1_service_repo"/>
+        <mkdir dir="target/test-resources/scenario1_service_repo/services"/>
+        <mkdir dir="target/test-resources/scenario1_service_repo/modules"/>
+
+	<!-- setup scenario1 client repository-->
+        <copy file="test-resources/security/s1.client.axis2.xml"
+            tofile="target/test-resources/scenario1_client_repo/axis2.xml"/>
+        <copy file="../security/target/security.mar"
+            tofile="target/test-resources/scenario1_client_repo/modules/security.mar"/>
+
+   	<ant:path id="sec.interop.service.jar" location="../security/target/PingPort.aar"/>
+        <maven:addPath id="maven.dependency.classpath" refid="sec.interop.service.jar"/>
+
+	<!-- setup scenario1 service repository-->
+        <copy file="test-resources/security/s1.service.axis2.xml"
+            tofile="target/test-resources/scenario1_service_repo/axis2.xml"/>
+        <copy file="../security/target/security.mar"
+            tofile="target/test-resources/scenario1_service_repo/modules/security.mar"/>
+        <copy file="../security/target/PingPort.aar"
+            tofile="target/test-resources/scenario1_service_repo/services/PingPort.aar"/>
+
+
     <!-- Standard repository -->
     <mkdir dir="target/Repository"/>
         <mkdir dir="target/Repository/services"/>

Modified: webservices/axis/trunk/java/modules/integration/project.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/project.xml?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/integration/project.xml (original)
+++ webservices/axis/trunk/java/modules/integration/project.xml Mon Aug 29 08:15:45 2005
@@ -169,6 +169,38 @@
             <artifactId>maven-itest-plugin</artifactId>
             <version>1.0</version>
             <type>plugin</type>
+        </dependency>
+        <dependency>
+            <groupId>wss4j</groupId>
+            <artifactId>wss4j</artifactId>
+            <version>SNAPSHOT</version>
+            <properties>
+                <module>true</module>
+            </properties>
+        </dependency>
+        <dependency>
+            <groupId>xml-security</groupId>
+            <artifactId>xmlsec</artifactId>
+            <version>1.2.1</version>
+            <properties>
+                <module>true</module>
+            </properties>
+        </dependency>
+        <dependency>
+            <groupId>bouncycastle</groupId>
+            <artifactId>bcprov</artifactId>
+            <version>jdk13-128</version>
+            <properties>
+                <module>true</module>
+            </properties>
+        </dependency>
+        <dependency>
+            <groupId>opensaml</groupId>
+            <artifactId>opensaml</artifactId>
+            <version>1.0.1</version>
+            <properties>
+                <module>true</module>
+            </properties>
         </dependency>
         <dependency>
             <groupId>junit</groupId>

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s1.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s1.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s1.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s1.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">Chris</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordText</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s1.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s1.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s1.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s1.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,90 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+
+    <!-- ================================================= -->
+    <!-- Transport Ins -->
+    <!-- ================================================= -->
+    <transportReceiver name="http" class="org.apache.axis2.transport.http.SimpleHTTPServer">
+        <parameter name="port" locked="xsd:false">6060</parameter>
+    </transportReceiver>
+
+    <!-- Uncomment this one with the appropriate papameters to enable the SMTP transport Receiver
+    <transportReceiver name="mail" class="org.apache.axis2.transport.mail.SimpleMailListener">
+          <parameter name="transport.mail.pop3.host" locked="xsd:false">127.0.0.1</parameter>
+          <parameter name="transport.mail.pop3.user" locked="xsd:false">axis2</parameter>
+          <parameter name="transport.mail.pop3.password" locked="xsd:false">axis2</parameter>
+          <parameter name="transport.mail.pop3.port" locked="xsd:false">110</parameter>
+          <parameter name="transport.mail.replyToAddress" locked="xsd:false">axis2@127.0.0.1</parameter>
+      </transportReceiver> -->
+
+    <transportReceiver name="tcp" class="org.apache.axis2.transport.tcp.TCPServer">
+        <parameter name="port" locked="xsd:false">6060</parameter>
+    </transportReceiver>
+
+    <!-- ================================================= -->
+    <!-- Transport Outs -->
+    <!-- ================================================= -->
+
+    <transportSender name="tcp" class="org.apache.axis2.transport.tcp.TCPTransportSender"/>
+    <transportSender name="local" class="org.apache.axis2.transport.local.LocalTransportSender"/>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+    <transportSender name="https" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.1</parameter>
+    </transportSender>
+
+    <!-- Uncomment this one with the appropriate papameters to enable the SMTP transport Receiver
+   <transportSender name="mail" class="org.apache.axis2.transport.mail.MailTransportSender">
+       <parameter name="transport.mail.smtp.host" locked="xsd:false">127.0.0.1</parameter>
+       <parameter name="transport.mail.smtp.user" locked="xsd:false">axis2</parameter>
+       <parameter name="transport.mail.smtp.password" locked="xsd:false">axis2</parameter>
+       <parameter name="transport.mail.smtp.port" locked="xsd:false">25</parameter>
+   </transportSender>
+   -->
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s2.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s2.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s2.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s2.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s2.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s2.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s2.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s2.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s2a.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s3.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s3.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s3.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s3.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s3.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s3.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s3.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s3.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s4.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s4.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s4.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s4.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s4.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s4.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s4.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s4.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s5.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s5.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s5.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s5.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s5.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s5.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s5.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s5.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s6.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s6.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s6.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s6.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s6.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s6.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s6.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s6.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s7.client.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s7.client.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s7.client.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s7.client.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,58 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <!-- Scenario 1: Client's Configuration:START-->
+
+    <parameter name="OutAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="user" locked="xsd:false">alice</parameter>
+    <parameter name="OutPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+    <parameter name="passwordType" locked="xsd:false">PasswordDigest</parameter>
+
+    <parameter name="InAction" locked="xsd:false">NoSecurity</parameter> 
+
+    <!-- Scenario 1: Client's Configuration:END-->
+
+
+    <transportReceiver name="http">
+    </transportReceiver>
+    <transportSender name="http" class="org.apache.axis2.transport.http.CommonsHTTPTransportSender">
+        <parameter name="PROTOCOL" locked="xsd:false">HTTP/1.0</parameter>
+    </transportSender>
+
+
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test-resources/security/s7.service.axis2.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test-resources/security/s7.service.axis2.xml?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test-resources/security/s7.service.axis2.xml (added)
+++ webservices/axis/trunk/java/modules/integration/test-resources/security/s7.service.axis2.xml Mon Aug 29 08:15:45 2005
@@ -0,0 +1,47 @@
+<axisconfig name="AxisJava2.0">
+    <parameter name="hotdeployment" locked="xsd:false">true</parameter>
+    <parameter name="hotupdate" locked="xsd:false">true</parameter>
+
+    <messageReceiver mep="INOUT" class="org.apache.axis2.receivers.RawXMLINOutMessageReceiver"/>
+
+    <!-- Engage the security module -->
+    <module ref="security"/>
+
+    <!-- This is only till we get the service specific parameters fixed in service.xml -->
+
+    <!-- Scenario 1: Service's Configuration: START-->
+    <!-- Also we can switch back to hte normal parameter names when we can seperately assign them to the flows -->
+
+    <parameter name="InAction" locked="xsd:false">UsernameToken</parameter>
+    <parameter name="InPasswordCallbackClass" locked="xsd:false">org.apache.axis2.security.PWCallback</parameter>
+
+    <parameter name="OutAction" locked="xsd:false">NoSecurity</parameter> -->
+
+    <!-- Scenario 1: Service's Configuration: END-->
+    
+    <phaseOrder type="inflow">
+        <!--  System pre defined phases       -->
+        <phase name="TransportIn"/>
+        <phase name="PreDispatch"/>
+        <phase name="Dispatch"/>
+        <phase name="PostDispatch"/>
+        <!--  System pre defined phases       -->
+        <!--   After Postdispatch phase module author or or service author can add any phase he want      -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="outflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+        <!--        This is temporray solution will be change soon-->
+        <phase name="security"/>
+    </phaseOrder>
+    <phaseOrder type="INfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+    <phaseOrder type="Outfaultflow">
+        <!--      user can add his own phases to this area  -->
+        <phase name="userphase1"/>
+    </phaseOrder>
+</axisconfig>
+

Added: webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/InteropTestBase.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/InteropTestBase.java?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/InteropTestBase.java (added)
+++ webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/InteropTestBase.java Mon Aug 29 08:15:45 2005
@@ -0,0 +1,120 @@
+/*
+* Copyright 2004,2005 The Apache Software Foundation.
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package org.apache.axis2.security;
+
+import junit.framework.TestCase;
+
+import org.apache.axis2.Constants;
+import org.apache.axis2.integration.UtilServer;
+/**
+ * 
+ * @author Ruchith Fernando (ruchith.fernando@gmail.com)
+ */
+public class InteropTestBase extends TestCase {
+
+    protected static final String SCENARIO1_SERVICE_REPOSITORY = "scenario1_service_repo";
+    
+    protected static final String SCENARIO1_CLIENT_REPOSITORY = "scenario1_client_repo";
+
+    protected static final String SCENARIO2_SERVICE_REPOSITORY = "scenario2_service_repo";
+    
+    protected static final String SCENARIO2_CLIENT_REPOSITORY = "scenario2_client_repo";
+
+    protected static final String SCENARIO2a_SERVICE_REPOSITORY = "scenario2a_service_repo";
+    
+    protected static final String SCENARIO2a_CLIENT_REPOSITORY = "scenario2a_client_repo";
+    
+    protected static final String SCENARIO3_SERVICE_REPOSITORY = "scenario3_service_repo";
+    
+    protected static final String SCENARIO3_CLIENT_REPOSITORY = "scenario3_client_repo";
+    
+    protected static final String SCENARIO4_SERVICE_REPOSITORY = "scenario4_service_repo";
+    
+    protected static final String SCENARIO4_CLIENT_REPOSITORY = "scenario4_client_repo";
+
+    protected static final String SCENARIO5_SERVICE_REPOSITORY = "scenario5_service_repo";
+    
+    protected static final String SCENARIO5_CLIENT_REPOSITORY = "scenario5_client_repo";
+    
+    protected static final String SCENARIO6_SERVICE_REPOSITORY = "scenario6_service_repo";
+    
+    protected static final String SCENARIO6_CLIENT_REPOSITORY = "scenario6_client_repo";
+    
+    protected static final String SCENARIO7_SERVICE_REPOSITORY = "scenario7_service_repo";
+    
+    protected static final String SCENARIO7_CLIENT_REPOSITORY = "scenario7_client_repo";
+    
+    /*
+     * We have to create different a client repository and a service repository
+     * for each scenarion since we dont have the support to get the parameter 
+     * values off the service.xml yet
+     */
+    private String serviceRepo;
+    
+    private String clientRepo;
+
+    private String targetEpr = "http://127.0.0.1:" + 
+    		UtilServer.TESTING_PORT +
+    	"/axis2/services/PingPort";
+    
+	public InteropTestBase() {
+		super();
+	}
+
+	public InteropTestBase(String arg0) {
+		super(arg0);
+	}
+
+	/**
+	 * set up the service
+	 */
+	protected void setUp() throws Exception {
+		UtilServer.start(Constants.TESTING_PATH + serviceRepo);
+	}
+
+	/**
+	 * Cleanup 
+	 */
+	protected void tearDown() throws Exception {
+        UtilServer.stop();
+    }
+
+	protected void setClientRepo(String clientRepo) {
+		this.clientRepo = clientRepo;
+	}
+
+	public String getClientRepo() {
+		return clientRepo;
+	}
+
+	protected void setServiceRepo(String serviceRepo) {
+		this.serviceRepo = serviceRepo;
+	}
+	
+	/**
+	 * Do test
+	 */
+    public void testInterop() {
+    	try {
+    		InteropScenarioClient.main(new String[]{Constants.TESTING_PATH + clientRepo,targetEpr});
+    	} catch (Exception e) {
+    		e.printStackTrace();
+    		fail("Error in introperating with " + targetEpr + ", client configuration: " + clientRepo);
+    	}
+    }
+	
+}

Added: webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/Scenario1Test.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/Scenario1Test.java?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/Scenario1Test.java (added)
+++ webservices/axis/trunk/java/modules/integration/test/org/apache/axis2/security/Scenario1Test.java Mon Aug 29 08:15:45 2005
@@ -0,0 +1,31 @@
+/*
+* Copyright 2004,2005 The Apache Software Foundation.
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package org.apache.axis2.security;
+
+/**
+ * 
+ * @author Ruchith Fernando (ruchith.fernando@gmail.com)
+ */
+public class Scenario1Test extends InteropTestBase {
+    
+	protected void setUp() throws Exception {
+		this.setClientRepo(SCENARIO1_CLIENT_REPOSITORY);
+		this.setServiceRepo(SCENARIO1_SERVICE_REPOSITORY);
+		super.setUp();
+	}
+
+}

Added: webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/InteropScenarioClient.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/InteropScenarioClient.java?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/InteropScenarioClient.java (added)
+++ webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/InteropScenarioClient.java Mon Aug 29 08:15:45 2005
@@ -0,0 +1,59 @@
+/*
+* Copyright 2004,2005 The Apache Software Foundation.
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+package org.apache.axis2.security;
+
+import org.apache.axis2.oasis.ping.PingPortStub;
+import org.xmlsoap.ping.Ping;
+import org.xmlsoap.ping.PingDocument;
+import org.xmlsoap.ping.PingResponse;
+import org.xmlsoap.ping.PingResponseDocument;
+import org.xmlsoap.ping.TicketType;
+
+/**
+ * Client for the interop service
+ * This MUST be used with the codegen'ed classes
+ * @author Ruchith Fernando (ruchith.fernando@gmail.com)
+ */
+public class InteropScenarioClient {
+	
+	public static void main(String[] args) throws Exception {
+		
+		String clientRepo = args[0];
+		String url = args[1];
+		
+		TicketType ticket = TicketType.Factory.newInstance();
+		ticket.setStringValue("Ticket string value");
+		
+		Ping ping = Ping.Factory.newInstance();
+		ping.setText("Testing axis2-wss4j module");
+		ping.setTicket(ticket);
+		
+		PingDocument pingDoc = PingDocument.Factory.newInstance();		
+		pingDoc.setPing(ping);
+
+		PingPortStub stub = new PingPortStub(clientRepo,url);
+		PingResponseDocument pingResDoc = stub.Ping(pingDoc);
+		
+		PingResponse pingRes = pingResDoc.getPingResponse();
+		
+		System.out.println(pingRes.getText());
+		System.exit(0);
+		
+	}
+    
+    
+}

Added: webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/PWCallback.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/PWCallback.java?rev=264155&view=auto
==============================================================================
--- webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/PWCallback.java (added)
+++ webservices/axis/trunk/java/modules/security/interop/org/apache/axis2/security/PWCallback.java Mon Aug 29 08:15:45 2005
@@ -0,0 +1,174 @@
+package org.apache.axis2.security;
+
+
+import org.apache.ws.security.WSPasswordCallback;
+
+
+
+import javax.security.auth.callback.Callback;
+
+import javax.security.auth.callback.CallbackHandler;
+
+import javax.security.auth.callback.UnsupportedCallbackException;
+
+import java.io.IOException;
+
+
+
+/**
+
+ * Class PWCallback
+
+ */
+
+public class PWCallback implements CallbackHandler {
+
+
+
+    /** Field key */
+
+    private static final byte[] key = {
+
+        (byte) 0x31, (byte) 0xfd, (byte) 0xcb, (byte) 0xda, (byte) 0xfb,
+
+        (byte) 0xcd, (byte) 0x6b, (byte) 0xa8, (byte) 0xe6, (byte) 0x19,
+
+        (byte) 0xa7, (byte) 0xbf, (byte) 0x51, (byte) 0xf7, (byte) 0xc7,
+
+        (byte) 0x3e, (byte) 0x80, (byte) 0xae, (byte) 0x98, (byte) 0x51,
+
+        (byte) 0xc8, (byte) 0x51, (byte) 0x34, (byte) 0x04,
+
+    };
+
+
+
+    /*
+
+     * (non-Javadoc)
+
+     * @see javax.security.auth.callback.CallbackHandler#handle(javax.security.auth.callback.Callback[])
+
+     */
+
+
+
+    /**
+
+     * Method handle
+
+     * 
+
+     * @param callbacks 
+
+     * @throws java.io.IOException                  
+
+     * @throws javax.security.auth.callback.UnsupportedCallbackException 
+
+     */
+
+    public void handle(Callback[] callbacks)
+
+            throws IOException, UnsupportedCallbackException {
+
+
+
+        for (int i = 0; i < callbacks.length; i++) {
+
+            if (callbacks[i] instanceof WSPasswordCallback) {
+
+                WSPasswordCallback pc = (WSPasswordCallback) callbacks[i];
+
+
+
+                /*
+
+                 * This usage type is used only in case we received a
+
+                 * username token with a password of type PasswordText or
+
+                 * an unknown password type.
+
+                 * 
+
+                 * This case the WSPasswordCallback object contains the
+
+                 * identifier (aka username), the password we received, and
+
+                 * the password type string to identify the type.
+
+                 * 
+
+                 * Here we perform only a very simple check.
+
+                 */
+
+                if (pc.getUsage() == WSPasswordCallback.USERNAME_TOKEN_UNKNOWN) {
+
+                	if(pc.getIdentifer().equals("Ron") && pc.getPassword().equals("noR")) {
+
+                        return;
+
+                	}
+
+                    if (pc.getPassword().equals("sirhC")) {
+
+                        return;
+
+                    }               	
+
+                    throw new UnsupportedCallbackException(callbacks[i],
+
+                    "check failed");
+
+                }
+
+                /*
+
+                 * here call a function/method to lookup the password for
+
+                 * the given identifier (e.g. a user name or keystore alias)
+
+                 * e.g.: pc.setPassword(passStore.getPassword(pc.getIdentfifier))
+
+                 * for Testing we supply a fixed name here.
+
+                 */
+
+                if (pc.getUsage() == WSPasswordCallback.KEY_NAME) {
+
+                    pc.setKey(key);
+
+                } else if(pc.getIdentifer().equals("alice")) {
+
+                    pc.setPassword("password");
+
+                } else if(pc.getIdentifer().equals("bob")) {
+
+                    pc.setPassword("password");
+
+                } else if(pc.getIdentifer().equals("Ron")) {
+
+                    pc.setPassword("noR");
+
+                } else {
+
+                    pc.setPassword("sirhC");
+
+                }
+
+            } else {
+
+                throw new UnsupportedCallbackException(callbacks[i],
+
+                        "Unrecognized Callback");
+
+            }
+
+        }
+
+    }
+
+}
+
+

Modified: webservices/axis/trunk/java/modules/security/maven.xml
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/maven.xml?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/security/maven.xml (original)
+++ webservices/axis/trunk/java/modules/security/maven.xml Mon Aug 29 08:15:45 2005
@@ -73,6 +73,10 @@
 	    <!-- Password callback class for the interop service -->
 	    <copy file="test-resources/PWCallback.java" 
 		    tofile="${work.dir}/org/apache/axis2/security/PWCallback.java" overwrite="yes"/>
+		
+	    <!-- Interop client -->
+	    <copy file="interop/org/apache/axis2/security/InteropScenarioClient.java" 
+		    tofile="${work.dir}/org/apache/axis2/security/InteropScenarioClient.java" overwrite="yes"/>
 
    	    <ant:path id="classes.dir" location="${class.dir}"/>
         <maven:addPath id="maven.dependency.classpath" refid="classes.dir"/>
@@ -86,13 +90,13 @@
 
 		<!-- move/copy interop classes into class.dir -->
     	<ant:move todir="${class.dir}">
-		    <ant:fileset dir="${basedir}/target/classes">
+            <ant:fileset dir="${basedir}/target/classes">
                 <ant:include name="**/ping/**/*.class"/>
                 <ant:include name="**/oasisOpen/**/*.class"/>
                 <ant:include name="**/PWCallback.class"/>
                
             </ant:fileset>
-	    </ant:move>
+	</ant:move>
 
         <delete includeEmptyDirs="true">
             <fileset dir="${basedir}/target/classes/org/apache/axis2/oasis/"/>

Modified: webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllReceiver.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllReceiver.java?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllReceiver.java (original)
+++ webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllReceiver.java Mon Aug 29 08:15:45 2005
@@ -76,6 +76,10 @@
             }
             int doAction = WSSecurityUtil.decodeAction(action, actions);
 
+            if(doAction == WSConstants.NO_SECURITY) {
+            	return;
+            }
+            
             String actor = (String) getOption(WSHandlerConstants.ACTOR);
 
             Document doc = null;

Modified: webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllSender.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllSender.java?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllSender.java (original)
+++ webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/WSDoAllSender.java Mon Aug 29 08:15:45 2005
@@ -263,6 +263,7 @@
                 log.debug("WSDoAllSender: exit invoke()");
             }
         } catch (WSSecurityException e) {
+        	e.printStackTrace();
             throw new AxisFault(e.getMessage(), e);
         } finally {
             reqData.clear();

Modified: webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/util/Axis2Util.java
URL: http://svn.apache.org/viewcvs/webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/util/Axis2Util.java?rev=264155&r1=264154&r2=264155&view=diff
==============================================================================
--- webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/util/Axis2Util.java (original)
+++ webservices/axis/trunk/java/modules/security/src/org/apache/axis2/security/util/Axis2Util.java Mon Aug 29 08:15:45 2005
@@ -82,13 +82,14 @@
 			//Set the new SOAPEnvelope
 			ByteArrayOutputStream os = new ByteArrayOutputStream();
 			XMLUtils.outputDOM(doc, os, true);
-
+			
 			ByteArrayInputStream is = new ByteArrayInputStream(os.toByteArray());
 			XMLStreamReader reader = XMLInputFactory.newInstance()
 					.createXMLStreamReader(is);
 
 			StAXSOAPModelBuilder builder = new StAXSOAPModelBuilder(reader,
 					envelopeNS);
+			builder.setCache(true);
 
 			return builder.getSOAPEnvelope();