Signature Security mule
- 1. Signature Security Feature Mule 1. Sign Signature 2. Verify Signature
- 2. Mule Digital Signature Processor • The Mule Digital Signature Processor adds a digital signature to a message payload, or part of the payload, to prove the identity of the message’s sender. Mule can also verify a signature on a message it receives to confirm the authenticity of the message’s sender. To sign or verify the signature of a message, Mule uses one of the following two Digital Signature Strategies: • JCE Signer • XML Signer
- 3. Adding a Digital JCE Signature to a Message • HTTP Connector • Convent String to Byte Array(This is required because mule sign on byte array format) • Sign the message payload
- 4. Global Signature configuration information • Set JCE_SIGNER as default Signer, Other option is XML_SIGHNER
- 5. Global Signature configuration information • Select Jce Signer Tab • Select Radio Button – Define attribute • Algorithm – HmacMD5 • Key – Sample value
- 6. Sign Signature • Connector Configuration done at last slide • Operation will be Sign • Input reference is payload, data that will be signed • Variable, signed value will be stored by mule signature
- 7. Sign Signature Flow Sample URL :http://localhost:8081/sign , body Contain sunil as text “sunil” signature will be generated
- 8. Verify Signature • Connector Configuration same as done for sign signature • Operation will be “Verify Signature” • Input reference is actual value of signature • Expected Signature will contain the signature that need to be verified
- 9. Verify Signature Flow Sample URL : http://localhost:8081/verifySignature?user=sunil&token=7i3AoaN5hJih8AEH9bUxag == Verify sunil signature passed in token
- 10. Verify Signature Flow Sample URL : http://localhost:8081/verifySignature?user=sunil&token=7i3AoaN5hJih8AEH9bUxag == Verify sunil signature passed in token