Signing and encrypting JSON payload for REST requests over a browser

Hi, I have been struggling with a basic question related to using signing and encryption for REST services. If the REST call (using JSON) happens over http or https via a browser, how can I ensure that JSON payload is signed and encrypted, just like a SOAP request that is signed and encrypted? I

Re: How to generate episode file using wadl2java ?

2016-01-21 14:29 GMT+04:00 Sergey Beryozkin : > Hi > > Sure, have a look please at > org.apache.cxf.catalog.OASISCatalogManager, this is in the cxf-core module. > > I see there it checks "OASISCatalogManager.catalog.debug.level" system > property - which is set, if not null, on > org.apache.xml.re

slow wsdl generation

Hi, we enountered some problem at our client. We have deployed a webservice using CXF framework on Tomcat. The user tries to download a wsdl of our web service. Since some time it takes very long time (5 minutes) than the WSDL appears (in a browser). Previously it was almost immediately. Have you a

Re: Signing and encrypting JSON payload for REST requests over a browser

Hi, On 18/03/16 00:21, Giriraj Bhojak wrote: Thank you Sergey. I went through the spec. It mentions that the spec is not stable yet and is subject to change. Would you know if it is widely used? There are two specs involved here, JOSE and WebCrypto, the former is stable and is already quite wide

Re: Signing and encrypting JSON payload for REST requests over a browser

Hi You may be talking about WebCrypto. If you have a CXF client sending JSON, then JWE/JWS protecting it is easy enough, but you have a script running in a browser then this script have no access to the key stores, unless it is a WebCrypto aware browser and most of them are by now AFAIK, Se

Problem with Exceptions thrown from a Service in Karaf/ServiceMix

Hello all, I'm having problems on Services published on Karaf/ServiceMix which, in case of faults, put many "" tags in the body of the exception's detail, while this does not happen outside of Karaf enviroment (see the P.S.) The only clue I've found up to know, is a message where Daniel Kulp disc

Re: Apache CXF 3.0.7 Webclient is taking too long to process the response

Hi Looks like something is seriously wrong with the client configuration, or, perhaps WebClient is targeting a different service endpoint that indeed takes 10 min to return Sergey On 18/03/16 14:44, Khare, Aparna wrote: Dear Colleagues, I'm using Apache cxf 3.0.7 and I use weblient to c

Re: Problem with Exceptions thrown from a Service in Karaf/ServiceMix

Hello all, I've detected the source of this problem, it is due to the endorsed java.lang.Exception in Karaf: https://github.com/apache/karaf/blob/master/exception/src/main/java/java/lang/Exception.java I'm going to file an issue on Karaf and start a discussion on the Karaf mailing list; the prope

Re: Signing and encrypting JSON payload for REST requests over a browser

Or a browser may ask a trusted server to help with it, and get this server returning a String representing a JOSE payload, then script then forward it somewhere else... Sergey On 17/03/16 21:35, Sergey Beryozkin wrote: Hi You may be talking about WebCrypto. If you have a CXF client sending J

Static wsdl not working after ugrading to CXF 3.0.4

Hello everyone, I'm new to the mailing list and desperate for help on this issue I have. I have posted a mesage to stackoverflow that I copy&paste below. Apologies if this is not allowed but I think it explains the problem quite clearly. The link to the original post is: http://stackoverflow.com/

Re: Signing and encrypting JSON payload for REST requests over a browser

Thank you very much Sergey. Thanks, Giriraj On Mar 18, 2016 6:06 AM, "Sergey Beryozkin" wrote: > Hi, > On 18/03/16 00:21, Giriraj Bhojak wrote: > >> Thank you Sergey. >> I went through the spec. It mentions that the spec is not stable yet and >> is >> subject to change. Would you know if it is w

CXF client for service with SWA file attachment

I have an existing (AXIS) service that transfers a binary file using SWA, the schema looks like this: I'm trying to create a new CXF client instead of the old AXIS one that can communicate with the server just like the old client (I can't change the server in any way). When I run wsdl2jav

Re: Signing and encrypting JSON payload for REST requests over a browser

Thank you Sergey. I went through the spec. It mentions that the spec is not stable yet and is subject to change. Would you know if it is widely used? I was hoping to use one of the JavaScript tools such as jsrrsasign, but looks like it is our of picture. Would you be able to share the source code/

Re: How to generate episode file using wadl2java ?

Thanks for this effort, but as I said, it is unlikely I'll have a chance to prioritize on this issue... We already discussed it before, please review the suggestions I had in this thread on how the way the plugin currently manages the binding files can be investigated, so may be it can give you