Hi,

I have built a webservice, but I want some more security. The service has no session, so I have to send the user credentials on every request. My idea is, that I create a SOAP header node for username and password.

How I have to define both elements, that they are mandatory for the clients? I think, I can check the existence and the content of the nodes within a security delegate:

In Application.java:

WOWebServiceRegistrar.registerWebService("MyService", MyService.class,
     new String[] { "changePassword", "getData" }, true);
WOWebServiceRegistrar.setSecurityDelegate(new MyServiceSecurity());


In MyServiceSecurity.java:

void processServerRequest(org.apache.axis.MessageContext mc) throws org.apache.axis.AxisFault {
     NSLog.out.appendln("Security processServerRequest");
// get the content of username and password and compare both with the database values
}

But I don't see the NSLog output of the delegate class and the new header elements are not visible within the wsdl description for the client. So I think, that the SecurityDelegate has not been called, and is there another way to define the headers (to see it in the wsdl)?

Thank you.

Best regards
Andre
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to arch...@mail-archive.com

Reply via email to