[JBoss JIRA] Commented: (JBWS-679) Initial implementation of SSO/Security context propogation support
by Andrei Iltchenko (JIRA)
[ http://jira.jboss.com/jira/browse/JBWS-679?page=comments#action_12406554 ]
Andrei Iltchenko commented on JBWS-679:
---------------------------------------
Jason, Thomas,
Prompted by your setting this request to "Out of Date" I wonder how does solves the problem of SSO for WS communication now?
Thanks,
Andrei.
> Initial implementation of SSO/Security context propogation support
> ------------------------------------------------------------------
>
> Key: JBWS-679
> URL: http://jira.jboss.com/jira/browse/JBWS-679
> Project: JBoss Web Services
> Issue Type: Feature Request
> Security Level: Public(Everyone can see)
> Components: ws-security
> Reporter: Jason T. Greene
>
> We should offer the ability to issue and propogate security tokens within web service requests. This would allow for a service endpoint to propogate the callers identity to any internal or external web service that it invokes. This should be done in a portable way, since a destination service can be running on any platform on any location on the internet.
> There are a number of specifications that could achieve this functionality:
> WS-Trust
> SAML
> WS-Security Kerberos Token Profile
> WS-Security SAML Token Profile
> Alot of this will depend on the new security framework being developerd.
> The first release of such functionality could be focused on a pure JBoss environment.
> -Jason
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 9 months
[JBoss JIRA] Created: (JBWS-1652) ServiceEndpoint requirements for JBossESB
by Tom Fennelly (JIRA)
ServiceEndpoint requirements for JBossESB
-----------------------------------------
Key: JBWS-1652
URL: http://jira.jboss.com/jira/browse/JBWS-1652
Project: JBoss Web Services
Issue Type: Feature Request
Security Level: Public (Everyone can see)
Reporter: Tom Fennelly
JBossESB implements what it calls a "JBossWSAdapter" (http://anonsvn.labs.jboss.com/labs/jbossesb/trunk/product/core/listeners/...). This class allows the ESB to expose JBossWS endpoints through the ESB i.e. over all transport protocols supported by the ESB. In order to do this, JBossWSAdapter currently relies on a number of non-public JBossWS classes (tested against jbossws-1.0.3.SP1 only).
After talking with Thomas (at JavaOne), we established that JBossWS will have a public API that will fit our requirements. This JIRA is just to track the ESB requirements in this area.
So the ESB needs the following:
1. The ability to "lookup" a JBossWS ServiceEndpoint (or its equivalent in the new API). We currently use the ServiceEndpointManagerFactory to do this.
2. The ability to invoke the ServiceEndpoint to process a SOAP payload (ala the "ServiceEndpoint.handleRequest" method in jbossws-1.0.3.SP1).
3. The ability to register/deploy endpoint implementations. Thomas showed me how this can be done, but I forget the exact code now without having the code in front of me :-)
4. The ability to get the endpoint WSDL from the ServiceEndpoint instance (ala the ServiceEndpoint.handleWSDLRequest method in jbossws-1.0.3.SP1).
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
16 years, 9 months