This was mentioned in [1] before. I think that one of the SCA goals is to allow developers to concentrate in the business logic, and leave the infrastructure details for the runtime. The idea is that you can have your component implementation and then use SCA Bindings to expose it's services using multiple protocols (e.g using json-rpc, rmi or jms).
But I see your scenario as a valid one, where a service invocation need to pass credentials or tokens when invoking some references, and these can be http based bindings or not, so we might need to see how we can accomplish this with a more generic solution if possible. Let's see what others have to say here... and I'll think more about the issue in parallel. [1] http://www.mail-archive.com/user@tuscany.apache.org/msg00410.html On Mon, Mar 9, 2009 at 7:58 AM, Angel E Tomala Reyes <aetom...@us.ibm.com> wrote: > One more piece of information. This application will be deployed in WAS > 7.0.0.1 using standard basic authentication using LDAP and use LTPA for > token generation. > > > Angel E. Tomala-Reyes > IBM Corporation, Enterprise Initiatives > Cloud Computing Enablement > Software Engineer > > > Angel E Tomala Reyes---03/09/2009 10:50:41 AM---All: > > Angel E Tomala Reyes/Poughkeepsie/i...@ibmus > > 03/09/2009 10:49 AM > > Please respond to > user@tuscany.apache.org > > To > user@tuscany.apache.org > cc > Luciano Resende/Westford/i...@lotus > Subject > Obtaining request header information at the operation level > All: > I have a requirement to obtain request header information from within an > operation. Here is my scenario: > > 1. User logs on to a Tuscany based application containing my services. > During the initial log on, the user will be provided secret keys and token > information which will be passed around during the duration of the user > session. > 2. User will perform operations, some of which will require to make soap > calls to other services in the application. To accomplish this, I need to > obtain some of the header information that activated the operation. > > Because the servlet information is not visible at the service/operation > level, I am stuck trying to figureout how to obtain such data. Could any one > offer some suggestions. The binding I will be using is jsonRPC. > > > > Angel E. Tomala-Reyes > IBM Corporation, Enterprise Initiatives > Cloud Computing Enablement > Software Engineer > -- Luciano Resende Apache Tuscany, Apache PhotArk http://people.apache.org/~lresende http://lresende.blogspot.com/