Custom authentication for SOAP using JavaEE

Question

I need to implement double check authentication using 1) certificate and 2) authentication by login/password for my SOAP web-service. Is it possible with JavaEE?

With spring-ws-security I could freely add custom AuthorizationProvider, and check user by any tool...

I've found authentication on servlet-level for certificate check:

<login-config>
       <auth-method>CLIENT-CERT</auth-method>
</login-config>

But how could I add custom authentication on SOAP level? Thanks!

Afsin Buyuksarac · Accepted Answer · 2015-09-30 11:15:11Z

1

I dont understand what you mean by JavaEE but still, you can implement custom authentication/authorization methodology at any place in your code.

As a true-story scenario we have implemented a BaseService class as super class of all Service classes of webservices, and checked authentication before calling execution of the service.

Second, even it is a webservice, still it is a Web project, it has servlet implementation and web.xml. Therefore you can use listeners, filters etc.

Very easy and dummy way implementing a filter. Then you can mark all your protected resources and public resources which are filtered or not.

answered Sep 30, 2015 at 11:15

Afsin Buyuksarac

2981 silver badge10 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Custom authentication for SOAP using JavaEE

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related