search

open-formulieren / open-forms

Smart and dynamic forms
https://open-forms.readthedocs.io
Other
37 stars 26 forks source link

Suwinet prefill plugin insufficient/not working WS-Security and WS-Addressing #4866

Open ATran-DevOne opened 3 days ago

ATran-DevOne commented 3 days ago

Product versie / Product version

2.7.10

Customer reference

Taiga Leeuwarden 29

Gemeente Leeuwarden and others

Omschrijf het probleem / Describe the bug

The current prefill plugin has insufficient WS-Security and WS-Addressing. WS-Security missing multiple choices of key type identifier such as "BinarySecuritytoken" and "X509SubjectKeyIndentifier", so the message is not correctly signed. WS-Addressing is missing a "wsa:from" with required OIN and the current "wsa:to" also required OIN but as workaround it can be set in de Suwinet bindings.

See documentation from inlichtingenbureau for connection and message/payload data:

  1. https://www.inlichtingenbureau.nl/Portals/0/adam/Zijbalk%20blok/BG5lPKXTqkirZASLnHJ9Qw/Text/20221018%20Stappenplan%20aansluiten%20Wgs-Inleesberichten%20v1.6.pdf
  2. https://www.inlichtingenbureau.nl/Portals/0/adam/Linklijst/smNL6M51NUyhujf1y36N1w/Link/Stappenplan%20aansluiten%20Portaal%20SHV,%20incl.%20A2A%20WGS%20-%20v2.7.pdf

Stappen om te reproduceren / Steps to reproduce

No response

Verwacht gedrag / Expected behavior

No response

Screen resolution

None

Device

None

OS

None

Browser

No response

alextreme commented 2 days ago

Besproken met Susanne, Leeuwarden staat er voor open om deze wijziging met assistentie vanuit Maykin zelf te realiseren, met als voorwaarde dat zij verantwoordelijk zijn tot aan acceptatie van de wijziging