服务端设置为PasswordDigest时pc.getPassword()总是为空
查看soap报文,有password
<wsse:Password xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordDigest">H2PFzDbU+7VDftl2pGbOPmoHTV4=</wsse:Password>
<wsse:Nonce xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd%22%3EaOwj2aGB55rMcRye//dvAw==%3C/wsse:Nonce>
<wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd%22%3E2008-08-03T15:37:31.015Z%3C/wsu:Created>
</wsse:UsernameToken>
后来发现文档上有这么一句话
if (pc.getIdentifer().equals("ws-client")) {
// set the password on the callback. This will later be compared to the
// password which was sent from the client.
pc.setPassword("password");
原来只要set进去就会自动比较了,呵呵,搞了老半天