Using Wss4jSecurityInterceptor throws a WRONG_DOCUMENT_ERR: A node is used in a different document than the one that created it

Question

I am upgrading my application to Java 11 and Spring boot 2.1.2 and running into following error when trying to communicate over SOAP to an external partner. It is the Wss4jS

Answer 1

Also can downgrade to 2.0.6 and work.

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-web-services</artifactId>
    <version>2.0.6.RELEASE</version>
</dependency>

Answer 2

Apparently there is a bug in the wss4j-ws-security-dom that spring pulls in. 2.2.0.

I updated to latest version 2.2.2 and it worked:

Answer 3

There is also a problem when use with new version saaj-impl (v1.4.0 or higher).

<dependency>
    <groupId>com.sun.xml.messaging.saaj</groupId>
    <artifactId>saaj-impl</artifactId>
    <version>1.3.28</version>
</dependency>