java - Custom authentication for SOAP using JavaEE -


i need implement double check authentication using 1) certificate , 2) authentication login/password soap web-service. possible javaee?

with spring-ws-security freely add custom authorizationprovider, , check user tool...

i've found authentication on servlet-level certificate check:

<login-config>        <auth-method>client-cert</auth-method> </login-config> 

but how add custom authentication on soap level? thanks!

i dont understand mean javaee still, can implement custom authentication/authorization methodology @ place in code.

as true-story scenario have implemented baseservice class super class of service classes of webservices, , checked authentication before calling execution of service.

second, webservice, still web project, has servlet implementation , web.xml. therefore can use listeners, filters etc.

very easy , dummy way implementing filter. can mark protected resources , public resources filtered or not.


Comments

Popular posts from this blog

html - Outlook 2010 Anchor (url/address/link) -

javascript - Why does running this loop 9 times take 100x longer than running it 8 times? -

Getting gateway time-out Rails app with Nginx + Puma running on Digital Ocean -