Re: [Acegisecurity-developer] Webservices and acegi
Hi Veit
You can use acegi (Spring Security) with your webservices
infrastructure. As a matter of fact, the WS-Security implementation of
excellent Spring Web Services provides integration with acegi (Spring
Security). This means you can use your existing Acegi configuration for
your SOAP service as well.
There is not a generic implementation of such service available that
can take authentication information from the soap requests and put it
automatically into the SecurityContext simply because there isn't a
single way to embedding authentication information in soap requests and
most of the times soap-request is itself embedded in proprietary message
types but nevertheless writing such thing would be as simple as this
String userName = // xpath or other way to get username
String passwd = // xpath or other way to get username
String role = // xpath or other way to get role
GrantedAuthorityImpl ga = new GrantedAuthorityImpl(role);
GrantedAuthority[] roles = new GrantedAuthority[] {ga};
Authentication authentication = new
UsernamePasswordAuthenticationToken(userName, passwd, roles);
SecurityContextHolder.getContext().setAuthentication(authentication);
and then acegi's authentication mechanism can be used for password
authentication.
Also, have a look at reference docs of Spring Web Services for more
information
http://static.springframework.org/spring-ws/site/reference/html/security.html#d0e2678
Regards,
Vishal Puri
Veit Guna wrote:
Hi.
I'm planning a project where webservices (JAX-WS) will be used. As
security mechanismen Basic-Authentication over SSL and WS-Security
(WSIT) should be supported. Since I use Spring and used acegi before in
a JSF webapp successfully, I would like to go-on using acegi also for
this new project.
Now my question is, has acegi WS support in any way? I think
Basic-Authentication over SSL should be no problem using standard url
pattern filtering, but what about WS-Security? Is there something that
can take authentication information from the soap requests and put it
automatically into the SecurityContext so it is available to the whole
application (Thread), not only in the webtier?
Would be fine if acegi could be the single-point-of-security in my app.
Regards,
Veit
-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
-
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
___
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] maven 2 eclipse integration
I would definitely like to try it :) Ray Krueger wrote: Jetbrains was kind enough to issue us an Open Source development license if you'd like to try it. IDEA just works :) no plugins required. - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] maven 2 eclipse integration
I am executing in trunk/acegisecurity directory. Ray Krueger wrote: Are you executing it out of the acegisecurity directory? And not in ./core or one of the other modules? On 4/30/07, Vishal Puri [EMAIL PROTECTED] wrote: Hi All Carlos and Luke, have you been able to generate eclipse .classpath and .project files with maven 2 for acegi ? Doing mvn eclipse:clean and mvn eclipse:eclipse doesn't generate these files for Acegi Security System for Spring - Parent Have you faced this problem? Vishal - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
[Acegisecurity-developer] maven 2 eclipse integration
Hi All Carlos and Luke, have you been able to generate eclipse .classpath and .project files with maven 2 for acegi ? Doing mvn eclipse:clean and mvn eclipse:eclipse doesn't generate these files for Acegi Security System for Spring - Parent Have you faced this problem? Vishal - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
Re: [Acegisecurity-developer] Cannot build, problems with ibiblio?
Maven-1.0.2 is dumping a lot of 301 errors in an attempt to download certain dependencies when building a project with a clean local repository.The reason for this is that the public Maven-1 repository is being moved to http://mirrors.ibiblio.org/pub/mirrors/maven from http://www.ibiblio.org/maven. Maven 1 doesn't understand redirects and therefore reports a 301 HTTP error when attempting to download certain dependencies. Just add this mirror site http://mirrors.ibiblio.org/pub/mirrors/maven in project.properties file and this problem should go away. Cheers Vishal Ray Krueger wrote: I'm still trying to get a contacts sample to build here. The only good way to do that is with maven 1.0. The maven1 builds for core and the contacts sample fail due to ibiblio returning 301 responses for some (maybe all) jar file downloads. This causes the build to fail for missing dependencies. I've been trying to get this to work on and off for two days, hoping the 301 would go away. I've attached the core build log. I can't do the contacts build, because the core build fails. Any ideas? - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Home: http://acegisecurity.org Acegisecurity-developer mailing list Acegisecurity-developer@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer
