Mark Overmeer > XML-Compile-WSS-1.00 > XML::Compile::WSS



Annotate this POD


Open  1
View/Report Bugs
Module Version: 1.00   Source   Latest Release: XML-Compile-WSS-1.13


XML::Compile::WSS - OASIS Web Services Security


 XML::Compile::WSS is extended by


 # This modules van be used "stand-alone" ...
 my $schema = XML::Compile::Cache->new(...);
 my $auth   = XML::Compile::WSS::BasicAuth->new
   (schema => $schema, username => $user, ...);

 # ... or as SOAP slave (strict order of object creation!)
 my $wss    = XML::Compile::SOAP::WSS->new;
 my $wsdl   = XML::Compile::WSDL11->new($wsdlfn);
 my $auth   = $wss->basicAuth(username => $user, ...);


The Web Services Security working group of W3C develops a set of standards which add signatures and encryption to XML.

In its current status, this module supports the following records in the Security header:

Encryption is not yet supported. Please hire me to get it implemented. You will certainly need the constants from XML::Compile::WSS::Util.



 -Option     --Default
  schema       undef
  version      undef
  wss_version  <required>
schema => XML::Compile::Cache

Add the WSS extension information to the provided schema. If not used, you have to call loadSchemas() before compiling readers and writers.

version => STRING

Alternative for wss_version, but not always as clear.

wss_version => '1.1'|MODULE

[1.0] Explicitly state which version WSS needs to be produced. You may use a version number. You may also use the MODULE name, which is a namespace constant, provided via ::Util. The only option is currently WSS11MODULE.



Returns the version number.



Returns a structure which can be used as timestamp, for instance in Created and Expires fields. This helper function will help you use these timestamp fields correctly.

The WSU10 specification defines a free format timestamp. Of course, that is very impractical. Typically a "design by committee" decission. Also, the standard does not describe the ValueType field, which is often used to cover this design mistake.


  # Both will get ValueType="$xsd/dateTime"
  Created => time()                 # will get formatted
  Created => '2012-10-14T22:26:21Z' # autodected

  # Explicit formatting
  Created => { _ => 'this Christmas'
             , ValueType => ''

  # No ValueType added
  Created => 'this Christmas'
XML::Compile::WSS->loadSchemas(SCHEMA, VERSION)

SCHEMA must extend XML::Compile::Cache.

The SCHEMA settings will may changed a little. For one, the allow_undeclared flag will be set. Also, any_element will be set to 'ATTEMPT' and mixed_elements to 'STRUCTURAL'.


XML Security Generic Hybrid Ciphers, 3 March 2011

XML Signature Properties, 3 March 2011

XML Signature Syntax and Processing Version 1.1, 3 March 2011

SOAP message security, March 2004

XML Signature Syntax and Processing (Second Edition), 10 June 2008

RFC4050 Using the ECDSA for XML Digital Signatures, april 2005

RFC4051 Additional XML Security Uniform Resource Identifiers (URIs), april 2005

XML Encryption Syntax and Processing, 10 December 2002


This module is part of XML-Compile-WSS distribution version 1.00, built on October 16, 2012. Website:

Other distributions in this suite: XML::Compile, XML::Compile::SOAP, XML::Compile::SOAP12, XML::Compile::SOAP::Daemon, XML::Compile::SOAP::WSA, XML::Compile::C14N, XML::Compile::WSS, XML::Compile::Tester, XML::Compile::Cache, XML::Compile::Dumper, XML::Compile::RPC, XML::Rewrite, XML::eXistDB, and XML::LibXML::Simple.

Please post questions or ideas to the mailinglist at For live contact with other developers, visit the #xml-compile channel on


Copyrights 2011-2012 by [Mark Overmeer]. For other contributors see ChangeLog.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. See

syntax highlighting: