Re: [JAX-RS]Http Digest Authentication support?

2009-02-13 Thread Daniel Kulp
On Fri February 13 2009 3:09:31 am Gabo Manuel wrote: > Hi Dan, > > Just a few questions: > > 1. What class do I use to test the digest support you created? This one > is added as an In interceptor, right? Not really, it's kind of built into the HTTPConduit. The Conduit already had plugable aut

Re: [JAX-RS]Http Digest Authentication support?

2009-02-13 Thread Gabo Manuel
Hi Dan, Just a few questions: 1. What class do I use to test the digest support you created? This one is added as an In interceptor, right? 2. Does it support "auth-int" as qop 3. Does it support nextnonce and just a generic question.. what is the purpose of the "opaque" token? as an additio

Re: [JAX-RS]Http Digest Authentication support?

2009-01-26 Thread Daniel Kulp
On Friday, I committed code to trunk to make it do digest auth. I'll get that merged to 2.1.x today and get new snapshots up. I've only tested against a simple service running in tomcat right now so it would be GREAT if someone else gave it a quick try to make sure it works. One note: dige

Re: [JAX-RS]Http Digest Authentication support?

2009-01-22 Thread krause
r/interceptor to retrieve an > "Authorization" header param and perform the hash calculation and > comparison there. I am unsure of two things: > > ... > > -- View this message in context: http://www.nabble.com/-JAX-RS-Http-Digest-Authentication-support--tp20181931p21617071.html Sent from the cxf-user mailing list archive at Nabble.com.

Re: [JAX-RS]Http Digest Authentication support?

2008-10-27 Thread Fred Dushin
Well, the username and password are base64 encoded, only. So, they really are being sent in clear text. (the header decodes to myUserName:myPassword) -Fred On Oct 27, 2008, at 3:00 AM, Gabo Manuel wrote: One thing I noticed though was that even though the sample shows it as Basic, the u

Re: [JAX-RS]Http Digest Authentication support?

2008-10-27 Thread Gabo Manuel
Hi All, Ignore #2. Got it to work. Error was on my side. One thing I noticed though was that even though the sample shows it as Basic, the username and pwd are not in clear text: GET /cxf/services/rest/Accounts/Account/1 HTTP/1.1 User-Agent: Jakarta Commons-HttpClient/3.1 Authorization: Basic

[JAX-RS]Http Digest Authentication support?

2008-10-26 Thread Gabo Manuel
Hi All, I am currently trying to implement a ReST service and was hoping to put some security to it. Afaik, WS-security is already not an option since I am not exposing a SOAP service (am I wrong here?). I tried searching the forums for some hint on where to go. I was able to find entries re