[
http://jira.jboss.com/jira/browse/JBWS-1136?page=comments#action_12393187 ]
Karl de Boer commented on JBWS-1136:
------------------------------------
It is a bit sad that this feature is still not supported.
If you start with a WSDL you end up haveing a JSE endpoint. I wonder why the EJB endpoints
do have JAAS Authentication and JSE Endpoints don't while it sbest to start with a
proper WS Interface (the WSDL)
I wrote already an implementation for this two years ago but dropped it because it should
be intergrated in the JAXWS WSSecurity Handler stack.
EJB Endpoints and JSE Endpoints should really have the same behaviour and functionality.
Reading from the release notes i thought this was fixed in 2.02GA at last.
I will see what i can do myself
Allow username to be specified in the requires list
---------------------------------------------------
Key: JBWS-1136
URL:
http://jira.jboss.com/jira/browse/JBWS-1136
Project: JBoss Web Services
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: ws-security
Affects Versions: jbossws-1.0.1
Reporter: Darran Lofthouse
Assigned To: Darran Lofthouse
Fix For: jbossws-2.1.1
Allow username to be specified in the requires list for endpoints so that messages
without the username can be rejected.
At the moment for EJB endpoints they can be configured using standard J2EE security so if
there is no authenticated user the request is rejected, however this can't be done for
the POJO endpoints.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira