[jboss-dev-forums] [JBoss Web Services Development] - Re: JBWS-2210 : CXF Username Token JAAS integration

[Sergey Beryozkin]

Sergey Beryozkin [http://community.jboss.org/people/sergeyb] created the discussion

"Re: JBWS-2210 : CXF Username Token JAAS integration"

To view the discussion, visit: http://community.jboss.org/message/582598#582598

--------------------------------------------------------------
Please see

 http://svn.apache.org/repos/asf/cxf/trunk/systests/ws-specs/src/test/java/org/apache/cxf/systest/ws/wssec10/server/server_restricted_authorized_2.xml http://svn.apache.org/repos/asf/cxf/trunk/systests/ws-specs/src/test/java/org/apache/cxf/systest/ws/wssec10/server/server_restricted_authorized_2.xml

for a policy first case, you need to set a "ws-security.ut.no-callbacks" property. 
And here is a test SimpleSubjectCreatingInterceptor :

 http://svn.apache.org/repos/asf/cxf/trunk/systests/ws-specs/src/test/java/org/apache/cxf/systest/ws/wssec10/server/SimpleSubjectCreatingInterceptor.java http://svn.apache.org/repos/asf/cxf/trunk/systests/ws-specs/src/test/java/org/apache/cxf/systest/ws/wssec10/server/SimpleSubjectCreatingInterceptor.java

it still extends the org.apache.cxf.ws.security.wss4j.AbstractUsernameTokenAuthenticatingInterceptor (just to make sure) the existing code
relying on it works. So setting the property above should fix the issue for the policy first case.

SimpleSubjectCreatingInterceptor should really extend 

 http://svn.apache.org/repos/asf/cxf/trunk/rt/core/src/main/java/org/apache/cxf/interceptor/security/AbstractUsernameTokenInInterceptor.java http://svn.apache.org/repos/asf/cxf/trunk/rt/core/src/main/java/org/apache/cxf/interceptor/security/AbstractUsernameTokenInInterceptor.java

no WSS4J dependency, UsernameToken is a CXF specific class, it can be extended without breaking the subclasses...

Hope this helps, Sergey
--------------------------------------------------------------

Reply to this message by going to Community
[http://community.jboss.org/message/582598#582598]

Start a new discussion in JBoss Web Services Development at Community
[http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2047]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-dev-forums/attachments/20110123/a0670034/attachment.html