Hi Rohit,
As your client has provided only an API token and expects it to be used in the header, you need to modify your SOAP request to include this token in the HTTP headers. Here’s a step-by-step guide:
1. Understand Authentication Type
Since the client has asked to use the API token in the header, it likely means Bearer Token Authentication or a Custom API Key Authentication.
2. Modify Your SOAP Request
Typically, SOAP authentication uses WS-Security headers for username/password, but in your case, you need to pass the token in the HTTP headers.
Option 1: Using a Custom API Token in Headers
If the API token is expected as a custom header, include it in the request headers:
Header Name: Authorization
Value: Bearer <API_TOKEN> (or whatever format the API provider expects)
Example: SOAP Request with Token in Headers using Python (Requests Library)
import requests
wsdl_url = "https://example.com/service?wsdl" # Replace with actual WSDL URL
soap_endpoint = "https://example.com/service" # Replace with actual endpoint
api_token = "your_api_token_here" # Replace with the provided API token
# Sample SOAP Request Body (Modify as per WSDL)
soap_body = """<?xml version="1.0"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:web="http://example.com/">
<soapenv:Header/>
<soapenv:Body>
<web:YourRequest>
<web:Parameter>Value</web:Parameter>
</web:YourRequest>
</soapenv:Body>
</soapenv:Envelope>"""
# Headers for SOAP request with API token
headers = {
"Content-Type": "text/xml;charset=UTF-8",
"Authorization": f"Bearer {api_token}", # Using API token for authentication
"SOAPAction": "YourSOAPActionHere" # Check the WSDL for required SOAP action
}
# Sending the SOAP request
response = requests.post(soap_endpoint, data=soap_body, headers=headers)
# Print response
print(response.status_code)
print(response.text)
Option 2: API Token as a Custom Header (Alternative)
Sometimes, APIs expect tokens as a custom header instead of Authorization. If your client specifies a different header, replace "Authorization" with their expected header, e.g.:
headers = {
"Content-Type": "text/xml;charset=UTF-8",
"X-API-KEY": api_token, # Some APIs require a different header
"SOAPAction": "YourSOAPActionHere"
}
3. Testing and Debugging
Test the API using Postman first by adding the API token in the request headers.
If authentication fails, confirm with the client whether:
The token should be prefixed with "Bearer " or another keyword.
A specific header name is required instead of "Authorization".
The API requires additional headers.
This should solve your issue!
Kindly mark it as "Accepted Solution"/"helpful", as it resolves your query. Please press like button for the resolution provided.
With Regards,
Krishna Kumar M - Talk with AIT3ch
LinkedIn: https://www.linkedin.com/in/mkrishnak4/
YouTube: https://www.youtube.com/@KrishAIT3CH
Topmate: https://topmate.io/mkrishnak4 [ Connect for 1-1 Session]
