Integrating with service Made in Spain. 1) Dev SOAP service has expired cert, 2) it throws 500s, 3) web UI uses SHA1 intermediate cert. Joy.
... so they decided to use WS-security (it has security in the name!) with a hardcoded username and password, because SECURITY!!1!
-
-
All WS-Security with user/password auth does is stick the username/password in the message header.
-
Then they decided they needed sessions, so you "log in" but the only secret needed is an OID they assign. Which you pass to every req anyway
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.