[JBoss Portal] - GWT and JBoss customized login module
by jdsignature
The GWT based web app integrated with the JBoss customized login module, it works as expected. However, the login page didn't get automatically populated after the user logged out. The user still be able to go back to the GWT application to perform the search which didn'tmake sense.
Questions:
1. GWT-RPC module only handle the java object, how GWT module redirects the login pages;
2. Can JBoss container monitor the GWT session? this means the JBoss container will force the login page popup once the session is no longer valid?
3. per my testing, it seemed that JBoss container didn't monitor the session experation as all even the session is invalidated in the GWT based web application, is this true?
Thanks for all your feedback.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4106913#4106913
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4106913
18 years, 8 months
[JBossWS] - Re: Protected Access to WSDL - How to define required Securi
by alessio.soldano@jboss.com
"centecbertl" wrote : Hi,
|
| according to JBWS-723 it is possible to protect access to the WSDL requests of Web-Services. Looking at it in more detail it appears that access does require only any valid login, but is not restricted to specific security roles.
|
| Is it possible to restrict the access to WSDLÃÂÃÂÃÂôs of Web-Services in a role based manner per Web-Service?
Right now this feature is not available. Feel free to create a feature request issue on JIRA so that we or the community can work on it in the future.
anonymous wrote : Use case: We have a full web-service API for internal use. For Clients we want to make one or two of these services available without publishing the full API structure (services, data structures,...) related to internal web-services. So the idea is that access to internal web-services and their WSDL requires a security roles which are not granted to clients.
Ok, I understand your use case; btw, is it doable for you to use different security domains to protect services that should be accessed by internal users only? this could be another solution...
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4106910#4106910
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4106910
18 years, 8 months