Layer7 API Management

 View Only

 How to map value from xpath /s:Envelope/s:Header/wsse:Security/wsse:UsernameToken/wsse:Password/@Type

Nivedita kathal's profile image
Nivedita kathal posted Feb 12, 2025 07:08 AM

Hi Experts,

I want to build a logic inside my policy to checks the "WS-Security Password" and accordingly passes the incoming request to another endpoint. However when I verified the "Require WS-Security **" policies provided by "Layer7 API Gateway" I could n't find one. 
Can someone please assist me how I can check/ extract the WS-Security Password type?
Note: I did try evaluate request xpath  /s:Envelope/s:Header/wsse:Security/wsse:UsernameToken/wsse:Password/@Type , but it returned no output.

Thanks in advance!

Mesut Yalcin's profile image
Mesut Yalcin

Hi Nivedita, 

If you have the correct configuration on the client side, you should be able to see the wsse:Security section in the request.mainpart. Then you can apply xpath to it. 

I can provide you with a SoapUI ss about the client configuration.