Examples with OutboundXMLSec org.apache.xml.security.stax.ext.OutboundXMLSec used on opensource projects

Example 1 with OutboundXMLSec

use of org.apache.xml.security.stax.ext.OutboundXMLSec in project cxf by apache.

the class XmlSecOutInterceptor method handleMessage.

public void handleMessage(Message message) throws Fault {
    if (message.getExchange().get(Throwable.class) != null) {
        return;
    }
    OutputStream os = message.getContent(OutputStream.class);
    String encoding = getEncoding(message);
    if (!(encryptRequest || signRequest)) {
        Exception ex = new Exception("Either encryption and/or signature must be enabled");
        throwFault(ex.getMessage(), ex);
    }
    XMLStreamWriter newXMLStreamWriter = null;
    try {
        XMLSecurityProperties properties = new XMLSecurityProperties();
        if (signRequest) {
            configureSignature(message, properties);
        }
        if (encryptRequest) {
            configureEncryption(message, properties);
        }
        OutboundXMLSec outboundXMLSec = XMLSec.getOutboundXMLSec(properties);
        newXMLStreamWriter = outboundXMLSec.processOutMessage(os, encoding);
        message.setContent(XMLStreamWriter.class, newXMLStreamWriter);
    } catch (XMLSecurityException e) {
        throwFault(e.getMessage(), e);
    } catch (Exception e) {
        throwFault(e.getMessage(), e);
    }
    message.put(AbstractOutDatabindingInterceptor.DISABLE_OUTPUTSTREAM_OPTIMIZATION, Boolean.TRUE);
    message.put(StaxOutInterceptor.FORCE_START_DOCUMENT, Boolean.TRUE);
    if (MessageUtils.getContextualBoolean(message, StaxOutInterceptor.FORCE_START_DOCUMENT, false)) {
        try {
            newXMLStreamWriter.writeStartDocument(encoding, "1.0");
        } catch (XMLStreamException e) {
            throw new Fault(e);
        }
        message.removeContent(OutputStream.class);
        message.put(OUTPUT_STREAM_HOLDER, os);
    }
    // Add a final interceptor to write end elements
    message.getInterceptorChain().add(ending);
}