You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@shiro.apache.org by seme <di...@gmail.com> on 2011/12/16 19:53:30 UTC

Web Services Authorization using Shiro

I want to add shiro authorization using aspect to secure my services. I will
expose those services via axis2.

What are the appropriate to integrate shiro with soap for client to call my
services.

Do for each method of my services do I need to add extra parameter for
client to pass in credential?

Thanks

--
View this message in context: http://shiro-user.582556.n2.nabble.com/Web-Services-Authorization-using-Shiro-tp7102080p7102080.html
Sent from the Shiro User mailing list archive at Nabble.com.

Re: Web Services Authorization using Shiro

Posted by seme <di...@gmail.com>.
My question is how to secure web services using shiro authorization and
authentication?
How web services client can pass in authentication and authorization via
soap?

thanks

--
View this message in context: http://shiro-user.582556.n2.nabble.com/Web-Services-Authorization-using-Shiro-tp7102080p7105051.html
Sent from the Shiro User mailing list archive at Nabble.com.

Reply:Re: Web Services Authorization using Shiro

Posted by SuoNayi <su...@163.com>.
For web application we have some login pages always via which we can get authenticated.
But there are not always no login pages for web service so how can we pass in the credential to get authenticated?



At 2011-12-17 03:19:37,"Les Hazlewood" <lh...@apache.org> wrote:
>I'm not sure I understand.  What do you mean by 'an extra parameter'?  Can you give some examples?
>
>--
>Les Hazlewood
>CTO, Katasoft | http://www.katasoft.com | 888.391.5282
>twitter: http://twitter.com/lhazlewood
>katasoft blog: http://www.katasoft.com/blogs/lhazlewood
>personal blog: http://leshazlewood.com
>
>
>On Dec 16, 2011, at 10:53 AM, seme wrote:
>
>> I want to add shiro authorization using aspect to secure my services. I will
>> expose those services via axis2.
>> 
>> What are the appropriate to integrate shiro with soap for client to call my
>> services.
>> 
>> Do for each method of my services do I need to add extra parameter for
>> client to pass in credential?
>> 
>> Thanks
>> 
>> --
>> View this message in context: http://shiro-user.582556.n2.nabble.com/Web-Services-Authorization-using-Shiro-tp7102080p7102080.html
>> Sent from the Shiro User mailing list archive at Nabble.com.
>

Re: Web Services Authorization using Shiro

Posted by Les Hazlewood <lh...@apache.org>.
I'm not sure I understand.  What do you mean by 'an extra parameter'?  Can you give some examples?

--
Les Hazlewood
CTO, Katasoft | http://www.katasoft.com | 888.391.5282
twitter: http://twitter.com/lhazlewood
katasoft blog: http://www.katasoft.com/blogs/lhazlewood
personal blog: http://leshazlewood.com


On Dec 16, 2011, at 10:53 AM, seme wrote:

> I want to add shiro authorization using aspect to secure my services. I will
> expose those services via axis2.
> 
> What are the appropriate to integrate shiro with soap for client to call my
> services.
> 
> Do for each method of my services do I need to add extra parameter for
> client to pass in credential?
> 
> Thanks
> 
> --
> View this message in context: http://shiro-user.582556.n2.nabble.com/Web-Services-Authorization-using-Shiro-tp7102080p7102080.html
> Sent from the Shiro User mailing list archive at Nabble.com.