Re: Authenticating websockets endpoints.

2013-08-19 Thread Jose Espinosa
I want to share my solution. I did not find a way to authenticate the Upgrade message and the websocket messages do not send headers. So I add the basic authentication to my message payload. The code is: * package com.revinate.sifter.auth; import

Re: Authenticating websockets endpoints.

2013-08-17 Thread Christian Posta
Spring Security does, iirc but might have a look at the underlying websocket connector and its configs. Its implemented with Jetty. On Fri, Aug 16, 2013 at 3:01 PM, Jose Espinosa j...@revinate.com wrote: Hey Christian, Thanks for the response, I have already have look and the sources you

Authenticating websockets endpoints.

2013-08-16 Thread Jose Espinosa
Hey all, I am using websockets to start on of my routes, now I am looking at adding security to my websockets end points. I took a look at camel security as described here http://camel.apache.org/camel-security.html and it works as advertised, but now I cann't find how to make my websocket

Re: Authenticating websockets endpoints.

2013-08-16 Thread Christian Posta
Jose, Depends on which security mechanism you use. For example, for spring-security, take a look here: http://camel.apache.org/spring-security.html You can set up the infrastructure for Spring Security to intercept and validate the authentication, but the Authentication object being on the

Re: Authenticating websockets endpoints.

2013-08-16 Thread Jose Espinosa
Hey Christian, Thanks for the response, I have already have look and the sources you point and they let me make some progress as I am using spring and I am already using it for securing my http requests. If I understand correctly I need to add the authentication information in the payload of my