Glossary Item Box

Government Gateway 2.2.0 (MR-01) ISV Developer Help (Doc Version 06/03/08) | Send comments on this topic.

# InvalidSecurityToken

An InvalidSecurityToken fault may occur as the result of the following conditions:

- The UsernameToken has no password
- The UsernameToken has a plain text password. The Gateway can be configured to allow a plain text password but by default requires the password Type to be wsse:PasswordDigest.

  Note: The password is considered plain text from a WS-Security perspective, however it is actually a base64 encoded MD5 hash of the password in lower case. For more details about encoding passwords, see UsenameToken.

- The GatewayToken has been compromised (e.g. Usage value has been modified)
- The GatewayToken has expired

    <soap:Envelope xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/03/addressing"
     xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
     xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
     xmlns:soap=
      "http://schemas.xmlsoap.org/soap/envelope/">
        <soap:Header>
        <wsa:Action>http://schemas.xmlsoap.org/ws/2004/03/addressing/fault</wsa:Action>
        <wsa:MessageID>uuid:b31a38e8-19b7-4465-b526-061fd63ab30b</wsa:MessageID>
        <wsa:RelatesTo>uuid:a83a6222-a3cc-4811-a13c-7447663e97ee</wsa:RelatesTo>
        <wsa:To>http://schemas.xmlsoap.org/ws/2004/03/addressing/role/anonymous</wsa:To>
        <wsse:Security> <wsu:Timestamp
          wsu:Id="Timestamp-b0fc9398-c495-4c0b-bece-43a96ab82bab">
          <wsu:Created>2004-07-02T10:04:53Z</wsu:Created>
        <wsu:Expires>2004-07-02T10:09:53Z</wsu:Expires>
        </wsu:Timestamp>
      </wsse:Security>
      </soap:Header>
        <soap:Body>
          <soap:Fault>
            <faultcode xmlns:code="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">code:InvalidSecurityToken</faultcode>
            <faultstring>An invalid security token was provided</faultstring>
            <faultactor>urn:GSO-System-Services:external:1.65:AdminInterface</faultactor>
        </soap:Fault>
      </soap:Body>
    </soap:Envelope>

© Crown Copyright 2008. All rights reserved