
Security News
New Website “Is It Really FOSS?” Tracks Transparency in Open Source Distribution Models
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Building Web Service Security.
The XML namespaces used by this gem begin with http://docs.oasis-open.org/wss/2004/01/. That URL has PDF documentation of "Web Services Security UsernameToken Profile 1.0" and "Web Services Security: SOAP Message Security 1.0 (WS-Security 2004)".
To place this in a historical context Wikipedia on WS-Security mentions "wsse" namespace prefix in its History section.
Akami is available through Rubygems and can be installed via:
$ gem install akami
wsse = Akami.wsse
Set the credentials for wsse:UsernameToken
basic auth:
wsse.credentials "username", "password"
Set the credentials for wsse:UsernameToken
digest auth:
wsse.credentials "username", "password", :digest
Enable wsu:Timestamp
headers. wsu:Created
is automatically set to Time.now
and wsu:Expires
is set to Time.now + 60
:
wsse.timestamp = true
Manually specify the values for wsu:Created
and wsu:Expires
:
wsse.created_at = Time.now
wsse.expires_at = Time.now + 60
Akami is based on an autovivificating Hash. So if you need to add custom tags, you can add them.
wsse["wsse:Security"]["wsse:UsernameToken"] = { "Organization" => "ACME" }
When generating the XML for the request, this Hash will be merged with another Hash containing
all the default tags and values.
This way you might dig into some code, but then you can even overwrite the default values.
wsse.to_xml
FAQs
Unknown package
We found that akami demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Security News
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.