No Or Invalid WSS Header Block Found In The Message For Actor In Extract WSS Header Block Filter in Oracle API Gateway (Doc ID 2251611.1)

Last updated on APRIL 07, 2017

Applies to:

Oracle API Gateway - Version 11.1.2 and later
Information in this document applies to any platform.

Goal

When invoking an OAG service that is expecting WS security headers with the appropriate security elements in the soap header, OAG is throwing an error regarding the WSS Header Block. It can be seen from the DEBUG logs that OAG is correctly finding the username and validating the password, but throwing this error afterwards:

No or Invalid WSS Header Block found in the message for actor: current actor:
com.vordel.common.VordelException: Could not find the WS-Security block for the actor specified: Current actor/role
at com.vordel.common.util.VersionHandler.createWSBlockInfo(VersionHandler.java:258)
at com.vordel.common.util.VersionHandler.getWSBlockInfo(VersionHandler.java:201)
at com.vordel.common.util.VersionHandler.getWSBlockInfo(VersionHandler.java:179)
....

The flow in the policy is as follows:

 'WS-Security Username Token' >> 'Check Group Membership' >> 'Extract WSS Header Block'

Why is this error occurring?

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms