Re: Authenticating websockets endpoints.

2013-08-19 Thread Jose Espinosa
I want to share my solution. I did not find a way to authenticate the "Upgrade" message and the websocket messages do not send headers. So I add the basic authentication to my message payload. The code is: * package com.revinate.sifter.auth; import org.apache.camel.Exchan

Re: Authenticating websockets endpoints.

2013-08-17 Thread Christian Posta
Spring Security does, iirc but might have a look at the underlying websocket connector and its configs. Its implemented with Jetty. On Fri, Aug 16, 2013 at 3:01 PM, Jose Espinosa wrote: > Hey Christian, > > Thanks for the response, I have already have look and the sources you > point and they l

Re: Authenticating websockets endpoints.

2013-08-16 Thread Jose Espinosa
Hey Christian, Thanks for the response, I have already have look and the sources you point and they let me make some progress as I am using spring and I am already using it for securing my http requests. If I understand correctly I need to add the authentication information in the payload of my s

Re: Authenticating websockets endpoints.

2013-08-16 Thread Christian Posta
Jose, Depends on which security mechanism you use. For example, for spring-security, take a look here: http://camel.apache.org/spring-security.html You can set up the infrastructure for Spring Security to intercept and validate the authentication, but the Authentication object being on the exchan