How to encrypt payloads in BPEL

We often come across a situation where in we want our payloads to be encrypted.
This is mostly required in case of a credit card where in you don't want the card number to be displayed in your audit trail,in that scenario we can you encryption of payloads.It can be done through owsm layer also but here we will see how to do it from the new feature added in SOA Suite 10.1.3.4.

We will be using the following document for the set up.


Desing
=========

Open up your jdeveloper 10.1.3.4 and create a new BPEL Process



Give it some logical name



Say next and Finish the creation of the Process.

Now drag and drop an assign activity in between and create a copy operation to copy the input variable to output variable.



Now if you will look in to the schema file created you will find you have an input element

element name="input" type="string"

Our purpose in this Tutorial is to encrypt the input payload.

For this we will select the .bpel process and go the structure tab of the BPEL process.

Select property and say create a property

Give the property name same as the input and make data type as string




So now you should see the property create as below.




Now choose the Property alias and click on create

make sure that in the property input is selected.

Now drill down till your payload comes and then in the query box click ctrl and space button to get the query automatically populated.Make sure it is till the input.Say ok and save the project





Now open up the wsdl file Encrypt.wsdl there you should have the following


xmlns:xsd="http://www.w3.org/2001/XMLSchema"

shcema included.

Again at the bottom

you should have following entry

<bpws:property name="ssn" type="xsd:string"
xmlns:pns1="http://xmlns.oracle.com/Encrypt"/>
<bpws:propertyAlias xmlns:pns1="http://xmlns.oracle.com/Encrypt"
propertyName="pns1:input"
xmlns:client="http://xmlns.oracle.com/Encrypt"
messageType="client:EncryptRequestMessage"
part="payload"
query="/client:EncryptProcessRequest/client:input"/>


Also in your BPEL.xml you should have following entry

<configurations>
<property name="encryptProperties" encryption="plaintext">{http://xmlns.oracle.com/Encrypt}input</property>
<property name="decryptProperties" encryption="plaintext">{http://xmlns.oracle.com/Encrypt}input</property>
</configurations>

Save those changes and deploy your project.Now once project is deployed invoke it with some data and check if it is encrypted or not.

For my case it is encrypted and shows the following




Here in my tes process i have used both encrypt and decrypt properties in my BPEL Process which is not required.We need to use only the encrypt properties

<configurations>
<property name="encryptProperties" encryption="plaintext">{http://xmlns.oracle.com/Encrypt}input</property>

in our bpel.xml to encrypt the payload.
Similary if you want to decrypt it you can use the same steps to create a process and decrypt the values using decrypt properties in the bpel.xml file.


Again name space used in definition of property and property alias should be same as the target namespace of the process to make it work.If you change the namespace then you have to change all the namespace in relation to that,better stick to the sample i have provided and let me know if any issue occurs.