java - Custom authentication for SOAP using JavaEE -
i need implement double check authentication using 1) certificate , 2) authentication login/password soap web-service. possible javaee?
with spring-ws-security freely add custom authorizationprovider, , check user tool...
i've found authentication on servlet-level certificate check:
<login-config> <auth-method>client-cert</auth-method> </login-config>
but how add custom authentication on soap level? thanks!
i dont understand mean javaee still, can implement custom authentication/authorization methodology @ place in code.
as true-story scenario have implemented baseservice class super class of service classes of webservices, , checked authentication before calling execution of service.
second, webservice, still web project, has servlet implementation , web.xml. therefore can use listeners, filters etc.
very easy , dummy way implementing filter. can mark protected resources , public resources filtered or not.
Comments
Post a Comment