This week's book giveaway is in the OO, Patterns, UML and Refactoring forum.
We're giving away four copies of Refactoring for Software Design Smells: Managing Technical Debt and have Girish Suryanarayana, Ganesh Samarthyam & Tushar Sharma on-line!
See this thread for details.
The moose likes Web Services and the fly likes Authentication in WS Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


JavaRanch » Java Forums » Java » Web Services
Bookmark "Authentication in WS" Watch "Authentication in WS" New topic
Author

Authentication in WS

Anthony M�ller
Greenhorn

Joined: Feb 06, 2008
Posts: 2
Hi all,

I'm working with WS using an environment composed by Netbeans 5.5 and JAX-WS.
Now, I'm trying to add security to some services, so that people who try to get access need to authenticate by username/password. I've been testing with some code provided at: http://java.sun.com/javase/6/docs/technotes/guides/security/jaas/tutorials/GeneralAcnOnly.html

but I got no success. Anybody could help me? Any help will be welcome.

Thanks in advance.

Best regards.

Tony.
Ulf Dittmer
Rancher

Joined: Mar 22, 2005
Posts: 42958
    
  73
JAAS is the be-all and end-all of authentication and authorization APIs. I find it to be overkill for most applications. What's more, it doesn't have anything specific for web services.

The WS-Security standard defines how authentication works for web services. Some time ago I wrote an article in the JavaRanch Journal on how to use it with Axis 2. (There's also an earlier article about Axis 1 which would make good companion reading.)

If you use some other WS toolkit than Axis you'll need to consult its documentation on how to incorporate WS-Security. E.g., the Metro stack has a component called WSIT that does this.
 
I’ve looked at a lot of different solutions, and in my humble opinion Aspose is the way to go. Here’s the link: http://aspose.com
 
subject: Authentication in WS
 
It's not a secret anymore!