WSDL SOAP Analyser - Problems with Security

[dalton]

Hi,
I am having some problems with the WSDL SOAP Analyser and our internally developed web service which has basic HTTP authentcation.

The samples work fine and have ruled out problems with the proxy service settings.

Basically when I send the request to the web service the authentication dialog box pops up but then I get the following error message in the response box:

org.apache.commons.httpclient.HttpException : Already used, but not recycled.

Any ideas?

Thanks.

[Radu]

Hello Dalton,

To provide HTTP support, the standalone version of Oxygen uses the apache jakarta HTTP client.
The message you received comes from that component and we do not have direct influence upon it.

We received in the past some reports on this message and will add this on or bug list and try to find a fix: either find an explanation as to what this message actually means
and a workaround, or, if this proves to be a bug, make a patch for the http client.

Probably the HTTP client has a problem with reusing the connection after authentication has occured.

It would be useful if you could tell us what HTTP server you are trying to connect to so that we can reproduce the problem on our side and maybe come up with a workaround.

For now as a workaround you can try to use the Oxygen Eclipse plugin which has the standard HTTP client so there should be no connection problem.

Regards, Radu.

[Radu]

We managed to fix the problem with the sending of a SOAP request to a
server that requires basic authentication.
The HTTP client was caching the connection and reusing it to send the
user and password to the server instead of creating a new connection for
this purpose.
We disabled caching for the connection and now it works.

If you are using Oxygen 6.0 and experiencing this problem please contact us
and we will provide you with a fix.

Radu.

[TimWallace]

Radu:

I have some Java code that is used with the web browser component that needs to POST to a page in our web application. That web app uses authentication. I need to be able to read the cookies in the browser in order to be able to sent the authentication cookies as part of the POST. We can modify our web server so that the cookies are not httpOnly. But I don't know to obtain cookies from the browser from within my Oxygen extension code and have not been able to find it in the documentation.

Can you provide any help?

Tim

[Radu]

Hi Tim,

I assume that you want from the Author Component Applet to query the web browser for a certain cookie already set in the page, is this correct?

There are two ways:

1) What you can do from the AuthorComponentSampleApplet is to call a Javascript method from the Web page like:

getAppletContext().showDocument(new URL("javascript:queryCookie()"));

In the Javascript file the "queryCookie()" method would look for a specific cookie and then give the cookie value to the applet by calling a method on the applet java class, something like:

Code: Select all

var sample = document.getElementById('authorComponentApplet').getAuthorComponentSample();

sample.setCookieValue(cookieValue);

The disadvantage with approach (1) is that the applet cannot obtain the value of the cookie directly from the Javascript method.

2) Java has a special library which can be used to call and receive results from a Javascript method.
So if you add in your project's classpath a path to this special library, like:

C:\Program Files\Java\jdk1.6.0_26\jre\lib\plugin.jar

You can use in the AuthorComponentSampleApplet code like this:

Code: Select all

Object value = netscape.javascript.JSObject.getWindow(AuthorComponentSampleApplet.this).call("testJS", new Object[0]);

You can find Javadoc for JSObject here:
http://www.docjar.com/docs/api/netscape ... bject.html

Regards,
Radu