Thanks to Chris Dail, we have been using his BasicAuthAuthorizationInterceptor to enforce basic authentication on a Camel CXF consumer endpoint (server), say, http://www.acme.com/test.svc. We noticed that the enforcement does not apply to the WSDL browsing (http://www.acme.com/test.svc?wsdl). That is, anybody can browse the wsdl without being authenticated. In fact, the interceptor does not even get called for such wsdl browsing. So my question is that whether there is a way to enforce basic authentication for all such accesses through camel-cxf.
Thanks in advance for any insight! -- View this message in context: http://camel.465427.n5.nabble.com/cxf-server-basic-authentication-using-interceptor-does-not-protect-wsdl-browsing-tp5777614.html Sent from the Camel - Users mailing list archive at Nabble.com.
