my dog learned polymorphism*
The moose likes Security and the fly likes How to Identify Client : WSS4J with multiple clients Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login


Win a copy of The Java EE 7 Tutorial Volume 1 or Volume 2 this week in the Java EE forum
or jQuery UI in Action in the JavaScript forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "How to Identify Client : WSS4J with multiple clients" Watch "How to Identify Client : WSS4J with multiple clients" New topic
Author

How to Identify Client : WSS4J with multiple clients

Dhanda Ka
Greenhorn

Joined: Dec 28, 2011
Posts: 1
This is the scenario,

Service expose 2 methods to 2 clients, each client is mapped to one method only, it shouldn't access other method. Each client has different keys.

Now, Server is able accept requests from both clients without issue, while responding server is able to encrypt with public key of any one of client key as configured in responseFlow,
<parameter name="user" value="client1alias" />. How to configure for other client?

I can set the username in MessageContext inside CallbackHandler implementation to make this work, but don't know how to identity client key alias name.

Please help.

PS: Using WSS4J 1.5.2


Arshad Noor
Ranch Hand

Joined: Oct 06, 2011
Posts: 34
Have you considered asking the developers of WSS4J on their User list? They are likely to give you the most definitive answer.

users@ws.apache.org

Arshad Noor
StrongAuth, Inc.
 
It is sorta covered in the JavaRanch Style Guide.
 
subject: How to Identify Client : WSS4J with multiple clients