Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-21 Thread Sergey Beryozkin
Hi I think it is more a Karaf-level question, where different JAAS contexts can be set up and such. Though I've heard one can have a two way TLS (client cert for our purposes) and also Basic Auth credentials combined in one request, example, when the same machine is shared between multiple us

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Martin Stiborský
One more, final question :) Currently, I have configured Karaf server, to accept only requests signed with certain client SSL certificate - this works for us as a very basic layer for authenticating incoming requests to Camel/jaxrs. So, I'w like to keep this solution, but also support HTTP Basic

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Martin Stiborský
wow, works, many thanks to you. I promised already few, but I should really write some tutorial on this topic…give me a slap if I don't do it next weekend… On Mon, May 20, 2013 at 1:26 PM, Sergey Beryozkin wrote: > Hi > > On 20/05/13 12:19, Martin Stiborský wrote: >> >> So far it seems for me tha

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Sergey Beryozkin
Hi On 20/05/13 12:19, Martin Stiborský wrote: So far it seems for me that I have a big problem with architecture of the application. It was working well so far, the approach we used. I mean, these "camel-cxf:rsServer" elements, with classes describing REST interface following jax-rs. The REST cl

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Martin Stiborský
So far it seems for me that I have a big problem with architecture of the application. It was working well so far, the approach we used. I mean, these "camel-cxf:rsServer" elements, with classes describing REST interface following jax-rs. The REST classes were looking a little bit weird, as they "

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Martin Stiborský
Ok, so it seems that implementing org.apache.cxf.jaxrs.ext.RequestHandler could help me. How to register such a provider then? We have REST interfaces created like this: We have few of these. I'm not sure, it it's possible to register jax-rs provider with this. On Mon, May 20, 2013 at 10:02 A

Re: Securing jaxrs REST interface with HTTP Basic auth

2013-05-20 Thread Ioan Eugen Stan
Hello Martin, I think you could try addding a Filter or Interceptor that does Basic Auth. If you're using CXF you could try something like [1] Hope it helps, [1] http://cxf.apache.org/docs/secure-jax-rs-services.html On Mon, May 20, 2013 at 10:48 AM, Martin Stiborský wrote: > Hello guys, > a j