Re: JAX-WS Severals @WebService same implementation

2011-02-24 Thread Daniel Kulp
You MIGHT be able to add an implementorClass="Service2" attribute to the jaxws:endpoint.That would tell it the class to actually look at. I'm not 100% sure that works though. It would probably be good to provide an endpointInterface attribute to jaxws:endpoint to override the value in

Re: cfx and policy alternatives

2011-02-24 Thread Daniel Kulp
On Thursday 24 February 2011 11:05:47 AM Rhenius, Karl Stefan wrote: > Hi Sergey, > > according to your answer this seems to be a bug? (That would be great, > because I could stop trying to find the right configuration :) > > > Dan has enhanced the Neethi implementation to properly > > support th

Re: JMS WSD Extensions

2011-02-24 Thread robert
I got it: http://cxf.apache.org/docs/jms-transport.html I'll try to do my research first... -- Robert On Thu, 24 Feb 2011 14:47:26 -0500, robert wrote: > Are both of these JMS WSDL Extensions functionally the same: > > -- http://cxf.apache.org/schemas/wsdl/jms (CXF) > > -- http://sch

JMS WSD Extensions

2011-02-24 Thread robert
Are both of these JMS WSDL Extensions functionally the same: -- http://cxf.apache.org/schemas/wsdl/jms (CXF) -- http://schemas.xmlsoap.org/wsdl/jms (WSIF JMS Extension) Or do they serve the same purpose? Thanks! Robert

SOAP header wsdl2java issue?

2011-02-24 Thread chakras
I have a CXF web service running that prints out a WSDL. Taking this WSDL and running it through CXF version of wsdl2java generates me the stub, wsdl2java -verbose -p mypackage.base -sn Myservice -client %1 When I invoke it, I always get a SOAP fault in my interceptor. My interceptor is Security

JAXB Unmarshalling Exception when Encountering < and >

2011-02-24 Thread Tim Clotworthy
ello, I am getting unmarshalling exceptions at any encounter of sequences < and > in my xml. I tried wrappering the corresponding pieces with CDATA like , but the exception still occurs. I am using the following classes for performing the unmarshalling activities: import javax.xml.bind.JAXBCon

Re: Support for in SOAP header

2011-02-24 Thread Glen Mazza
Yes, WS-Addressing is supported[1], at least starting from CXF 2.2 if not earlier. Worst case, you can always place whatever headers you want manually using JAX-WS handlers or interceptors[2]. HTH, Glen [1] https://cwiki.apache.org/CXF20DOC/ws-addressing.html [2] http://www.jroller.com/gmazza

Support for in SOAP header

2011-02-24 Thread Morris Jr, David P
Does CXF currently support and in the SOAP Header? If so, which version? Thanks!!

Re: XSS flaw in Available SOAP services page

2011-02-24 Thread Glen Mazza
But giving somebody a fraudulent link is not cross-site scripting, and browser certificate checks would catch that anyway. Only the service provider has control over the contents of the https://www.mybank.com/services/BankingService?wsdl page, Bad Guy has no opportunities to enter in data that

Odd behavior in CXF's JMX InstrumentationManagerImpl

2011-02-24 Thread Aki Yoshida
Hi, I am experimenting with the JMX instrumentaiton included in CXF in the standalone environment. It works fine with a single CXF bus file and I can see this bus showing up in the jconsole monitor. But when I use two bus files and setting parameter createMBServerConnectorFactory on one of the fil

RE: XSS flaw in Available SOAP services page

2011-02-24 Thread Rhenius, Karl Stefan
> But how could Bad Guy inject that on the Available SOAP > services page? > AFAIK cross-site scripting is only a problem when you allow > user entry > of fields that are reproduced as-is on HTML pages. He can give you a link that misuses a trustworthy domain to show his content Karl

Re: XSS flaw in Available SOAP services page

2011-02-24 Thread Glen Mazza
But how could Bad Guy inject that on the Available SOAP services page? AFAIK cross-site scripting is only a problem when you allow user entry of fields that are reproduced as-is on HTML pages. Glen On 2/24/2011 11:44 AM, sami wrote: On the "Available SOAP services page", I have an XSS inject

XSS flaw in Available SOAP services page

2011-02-24 Thread sami
On the "Available SOAP services page", I have an XSS injection problem. Ex : http://localhost:8080/webapp/services/alert('XSS') This could be used against site using CXf for phishing. What do you recommend to prevent that problem? Thanks, Emeric -- View this message in context: http://cxf.54

RE: cfx and policy alternatives

2011-02-24 Thread Rhenius, Karl Stefan
Hi Sergey, according to your answer this seems to be a bug? (That would be great, because I could stop trying to find the right configuration :) > Dan has enhanced the Neethi implementation to properly > support the policy intersection but that is more likely to > affect the client side. But

Re: cfx and policy alternatives

2011-02-24 Thread Sergey Beryozkin
Hi Dan has enhanced the Neethi implementation to properly support the policy intersection but that is more likely to affect the client side. But in this case, how does the server knows the 2nd request is coming from the original client which is supporting a SecureConversation policy ? It might be

Re: WSIF and CXF

2011-02-24 Thread robert
Are WSIF JMS extensions considered dead too? http://ws.apache.org/wsif/providers/wsdl_extensions/jms_extension.html Exactly what is going on with WSIF? Is it still hanging on? Or did someone make the move to make it a TLP and retire it? If it is retired... would it still be reachable for us

Local Transport Benchmarks

2011-02-24 Thread Joel Turkel
Hi, I'm exploring the possibility of using the CXF local transport to optimize the performance of a SOAP web service for intra-JVM communication. Has anyone done any benchmarking of the local vs. http transport? I'm sure the performance depends greatly on the web service but I'm just trying to

Re: Unmarshalling exception: NaN

2011-02-24 Thread Glen Mazza
Best to ask on the CXF User's list, devs are on both, but many more people are on Users. You can look over the wire to see what is being sent/received[1] differently--it could be something different, or in addition to, the NaN issue. I believe we went from JAXB 2.1 to 2.2 between CXF 2.2 and

cfx and policy alternatives

2011-02-24 Thread Rhenius, Karl Stefan
Hi, I'm a little bit confused about policy alternatives in cfx. As far as I understand, the server offers multiple policies, and a client may implement just one of them. So my setup is like this: Server-policy: #1 SecureConversation policy #2 nothing special, client

Re: JAX-WS Severals @WebService same implementation

2011-02-24 Thread Sergey Beryozkin
Hi On Thu, Feb 24, 2011 at 11:11 AM, Bertrand TROLARD wrote: > Hi, > > They are available at these 2 address, but the two services give the same > WSDL and so the same "functions". > The two services don't implement the same interface. I want two different > wsdl and so not the same functions. On

Re: JAX-WS Severals @WebService same implementation

2011-02-24 Thread Bertrand TROLARD
Hi, They are available at these 2 address, but the two services give the same WSDL and so the same "functions". The two services don't implement the same interface. I want two different wsdl and so not the same functions. One service could inherited the second. Thank you for your time. Bertr

Re: JAX-WS Severals @WebService same implementation

2011-02-24 Thread Sergey Beryozkin
Hi Are you using a single CXFServlet declaration with the pattern such as "/services/*"? An expect the first service be available at /services/Service1Test and the 2nd one at /services/Service2Test ? Cheers, Sergey On Thu, Feb 24, 2011 at 10:55 AM, Bertrand TROLARD wrote: > Hi, > I'm new to CXF

JAX-WS Severals @WebService same implementation

2011-02-24 Thread Bertrand TROLARD
Hi, I'm new to CXF. I try to use JAX-WS to and I want to have severals web-services with the same java class for the implementation. For these web-services, I want to use the same bean. Each web-service has more and more fontions, but every "client" can't have access to all fonctions (url dep