[jbossws-issues] [JBoss JIRA] Commented: (JBWS-1136) Allow username to be specified in the requires list

[Karl de Boer (JIRA)]

    [ http://jira.jboss.com/jira/browse/JBWS-1136?page=comments#action_12393187 ] 
            
Karl de Boer commented on JBWS-1136:
------------------------------------

It is a bit sad that this feature is still not supported.
If you start with a WSDL you end up haveing a JSE endpoint. I wonder why the EJB endpoints do have JAAS Authentication and JSE Endpoints don't while it sbest to start with a proper WS Interface (the WSDL)
I wrote already an implementation for this two years ago but dropped it because it should be intergrated in the JAXWS WSSecurity Handler stack.
EJB Endpoints and JSE Endpoints should really have the same behaviour and functionality.
Reading from the release notes  i thought this was fixed in 2.02GA at last.
I will see what i can do myself





> Allow username to be specified in the requires list
> ---------------------------------------------------
>
>                 Key: JBWS-1136
>                 URL: http://jira.jboss.com/jira/browse/JBWS-1136
>             Project: JBoss Web Services
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: ws-security
>    Affects Versions:  jbossws-1.0.1
>            Reporter: Darran Lofthouse
>         Assigned To: Darran Lofthouse
>             Fix For: jbossws-2.1.1
>
>
> Allow username to be specified in the requires list for endpoints so that messages without the username can be rejected.
> At the moment for EJB endpoints they can be configured using standard J2EE security so if there is no authenticated user the request is rejected, however this can't be done for the POJO endpoints.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira