Soap server authentication using nusoap

20 Responses to “Soap server authentication using nusoap”

1. 

   Jeroen says:

   August 15, 2011 at 4:12 pm

   Dear Abdullah,

   where does the variable “$authHeaders” get its values ?

   Regards,

   Jerre

   reply
   • 

     Abdullah says:

     August 15, 2011 at 5:46 pm

     You need to parse $data to get the header value. $authHeaders is a simple array where you stored the username,password from the $data variable. You can parse this $data using any xml library

     reply
     • 

       suzi says:

       February 27, 2012 at 10:42 am

       is the function ‘authenticate which registered must call by the client,if so; when to call main function;

       and what is return result of authenticate()

       reply
   • 

     nferreira says:

     August 24, 2011 at 11:13 am

     Hi.

     I am using nusoap (X-SOAP-Server: NuSOAP/0.7.3 (1.114)) for the first time and i am having trouble to access the headers in the server side.

     My request is this:

     user
     pass

     123456789

     In the client i use this to fill the headers:

     ——————————————
     $param = new SoapVar(array(‘username’ => ‘user’,’password’=> ‘pass’),SOAP_ENC_OBJECT);
     $header = new SoapHeader($this->wsdl,’UserCredentials’,$param,false);
     $this->client->__setSoapHeaders($header);
     ——————————————-

     In the server i will use a function to authenticate the user after parsing the username and password from headers.
     However i can’t access the variables from headers.

     I tried this methods whitout success:

     ——————————————-
     $this->nusoap_server->parse_request()
     $this->nusoap_server->parse_http_headers()
     $this->nusoap_server->requestHeader[‘UserCredentials’][‘username’]
     $this->nusoap_server->requestHeader[‘UserCredentials’][‘password’]
     ——————————————————————-

     Can you explain me how to fetch those variables Abdullah?

     Thanks in advance and best regards,

     nferreira

     reply
     • 

       Abdullah says:

       September 7, 2011 at 2:44 pm

       You can use any xml library for parsing the headers.

       reply
     • 

       Andrii says:

       February 28, 2012 at 8:56 am

       Try this
       In client:
       $client->setCredentials(base64_encode($login),base64_encode($password));
       In Server:
       $arrCred[‘user’] = base64_decode($_SERVER[‘PHP_AUTH_USER’]);
       $arrCred[‘password’] = base64_decode($_SERVER[‘PHP_AUTH_PW’]);

       reply
   • 

     Fernando Ramirez says:

     June 28, 2012 at 10:34 pm

     this way it works for me:

     public function service_start($data)
     {

     if(!empty($data)){

     /***********parsing header for authentication********/
     // parse header for username and password

     $AuthenticationInfo = array();
     $doc = new DOMDocument(“1.0″,”utf8”);
     $doc->loadXML($data);
     $xpath = new DOMXpath($doc);
     $usernameList = $xpath->query(“//username”);
     if($usernameList->length>0){
     $AuthenticationInfo[“username”] = $usernameList->item(0)->nodeValue;
     }
     $passwordList = $xpath->query(“//password”);
     if($passwordList->length>0){
     $AuthenticationInfo[“password”] = $passwordList->item(0)->nodeValue;
     }

     /*********************************************************/

     $this->validateUser($AuthenticationInfo); // function to validate the user

     $this->service($data);
     }
     else
     $this->service($data);

     }

     public function validateUser($auth)
     {
     if(!empty($auth[“username”])&& !empty($auth[“password”])){
     $this->authenticate($auth[“username”],$auth[“password”]); //this function check the authentication from db

     }
     else //$server->fault(401,’Authentication failed!’);
     $this->fault(401,’Authentication failed!’);
     }

     reply
2. 

   joat says:

   October 14, 2011 at 12:59 am

   Hello Abdullah,

   I am looking at your comments in service_start function “parse header for username and password”, could you please help with the function to parse this. A simple example will do, or point me to one, I am new to PHP and kind off lost.

   Thank you for you help,
   joat

   reply
   • 

     Gert-Mark says:

     January 19, 2012 at 8:30 pm

     Hello,

     I have been playing with this script today and only got it working after I realized I had to parse the soap header. Here is the code I used:

     $AuthenticationInfo = array();
     $doc = new DOMDocument(“1.0″,”utf8”);
     $doc->loadXML($data);
     $xpath = new DOMXpath($doc);
     $usernameList = $xpath->query(“//username”);
     if($usernameList->length>0){
     $AuthenticationInfo[“username”] = $usernameList->item(0)->nodeValue;
     }
     $passwordList = $xpath->query(“//password”);
     if($passwordList->length>0){
     $AuthenticationInfo[“password”] = $passwordList->item(0)->nodeValue;
     }

     reply
     • 

       Fernando Ramirez says:

       June 28, 2012 at 10:29 pm

       Excellent replay thank you very much , it works fine

       reply
3. 

   Jefferson says:

   October 25, 2011 at 6:35 pm

   Dear Abdullah,

   Please, give me an example of the return of the authenticate function.

   Thanks in advance and best regards,

   Jefferson.

   reply
4. 

   JunXu says:

   November 7, 2011 at 2:38 am

   Hi, I’ve tried servial times on php 5.1.6, but without success. Could you send me sample codes?
   My mailbox is xj107359@163.com.
   Thanks in advance.

   reply
   • 

     Abdullah says:

     December 26, 2011 at 12:31 pm

     What error you get?

     reply
5. 

   Tanny says:

   January 20, 2012 at 9:04 am

   Hey,
   I am trying to learn as to how to consume a web service in .NET using PHP. This is my first time with NuSoap and i can’t seem to get anywhere here. Below are the request and response to the webservice. Now how do i go about accessing the same. Anyhelp would be appreciated.
   ________________________________________________________________

   Request:

   POST /Service.asmx HTTP/1.1
   Host: 172.160.0.49
   Content-Type: text/xml; charset=utf-8
   Content-Length: length
   SOAPAction: “http://tempuri.org/GetData”

   string
   string

   string

   ________________________________________________________________

   Response:

   HTTP/1.1 200 OK
   Content-Type: text/xml; charset=utf-8
   Content-Length: length

   string

   reply
   • 

     Marc says:

     February 13, 2012 at 4:11 am

     You’ll find way easier to use Zend_Soap_Client from Zend Framework. It’s actually a wrapper for native SOAP functions from PHP. If you want any help with this send an email to marc (at) nwd (dot) mx.

     Regards,
     Marc

     reply
6. 

   fashion bug says:

   February 6, 2012 at 7:12 am

   I do not even understand how I finished up here, however I thought this submit was good. I don’t understand who you might be but certainly you are going to a well-known blogger when you are not already. Cheers!

   reply
7. 

   Nitesh says:

   May 3, 2012 at 11:43 am

   Hi,

   can you please tell me how to add authentication header / soap header in during wsdl creation i.e. during adding complextype and registring function in nusoap_server.

   I really need that as soon as possilbe.

   your help will be appriciated.

   Thanks in advance try to place sample code for this as well.

   reply
8. 

   David says:

   June 6, 2012 at 7:08 am

   Seems to work for me except that I can’t access the WSDL now.
   Do you have any idea why this is happening?
   Or do I have to pass credentials in order to view the WSDL?

   reply
9. 

   Fernando says:

   May 10, 2013 at 10:19 pm

   Thank for the script it helped a lot!!

   For the “incomplete” parts you can use same nusoap to parse headers:

   /***********parsing header for authentication********/
   $parser = new nusoap_parser($data);
   $authHeaders = $parser->get_soapheader(); // get headers in php array
   /****************************************************/

   for validation I modified the script like this:
   if( $this->validateUser($authHeaders) ){
   $this->service($data)
   }

   and the validateUser method return true if user and password are valid or false otherwise, how do you achieve this, is up to you (text file, database, array, hard coded…)

   cheers!

   reply
10. 

    Anderson Barbosa says:

    November 2, 2021 at 5:21 pm

    Add basic authentication in the header (Works with SoapUi)

    Thank you very much for sharing, I have managed to complete with other forums authentication in the header, I share result.

    You need to use “PHP_AUTH_USER” and “PHP_AUTH_PW”, this guarantees credentials per header and you can do example by “SoapUI – Auth (Basic)” select “Pre-emptive auth -> Authenticate pre-emptively”.

    ///////// server.php
    script_uri = ‘http://’ . $page;
    $this->configureWSDL(‘testserver’, ‘urn:’ . $this->script_uri);
    $this->wsdl->schemaTargetNamespace = $this->script_uri;
    }

    public function service_start($data)
    {
    if (!empty($data)) {

    /***********parsing header for authentication********/
    if (!isset($_SERVER[‘PHP_AUTH_USER’]) || !isset($_SERVER[‘PHP_AUTH_PW’])) {
    $this->fault(401, “Authentication required!”);
    return;
    }

    $AuthenticationInfo = [‘username’ => $_SERVER[‘PHP_AUTH_USER’], ‘password’ => $_SERVER[‘PHP_AUTH_PW’]];
    /*********************************************************/

    $this->validateUser($AuthenticationInfo); // function to validate the user
    $this->service($data);
    } else{
    $this->service($data);
    }
    }
    public function validateUser($auth)
    {
    if (!empty($auth[“username”]) && !empty($auth[“password”])) {
    $this->authenticate($auth[“username”], $auth[“password”]); //this function check the authentication from db
    } else {
    $this->fault(401, “Authentication failed!”);
    }
    }

    public function authenticate($username, $password){
    if($username === ‘anderson’ && $password === ‘1234567890’){
    return true;
    }else{
    $this->fault(401, “Authentication failed!”);
    }
    }
    }

    try{
    $server = new Soap_wrapper();

    $page = $_SERVER[‘HTTP_HOST’] . $_SERVER[‘PHP_SELF’];
    $ns = ‘http://’ . $page;

    $input_array = array(‘id’ => “xsd:string”);
    $return_array = array(“return” => “xsd:string”); // cambio de array a string
    $server->register(‘getData’, $input_array, $return_array, “urn:SOAPServerWSDL”, “urn:” . $ns . “/getData”, “rpc”, “encoded”, “Prueba de conexion al WS”);

    function getData($id){
    return “Hola $id”;
    }

    $server->service_start(file_get_contents(“php://input”));
    }catch(\Exception $e){
    die(“Error”);
    }

    ///////// client.php
    getError();
    if ($error) {
    echo “Constructor error

    " . $error . "

    “;
    }
    //Use basic authentication method
    $client->setCredentials(“anderson”, “1234567890”, “basic”);
    $result = “”;

    if ($client) {
    $result = $client->call(“getData”, array(“id” => “123”));
    }
    if ($client->fault) {
    echo “Fault

    ";
        print_r($result);
        echo "

    “;
    } else {
    $error = $client->getError();
    if ($error) {
    echo “Error

    " . $error . "

    “;
    } else {
    echo “zip code

    ";
            echo $result;
            echo "

    “;
    }
    }

    echo “Request”;
    echo “

    " . htmlspecialchars($client->request, ENT_QUOTES) . "

    “;
    echo “Response”;
    echo “

    " . htmlspecialchars($client->response, ENT_QUOTES) . "

    “;

    reply