[jira] Commented: (CXF-2873) Add authentication support (via HTTP basic authentication)

["Sergey Beryozkin (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CXF-2873?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12885070#action_12885070 ] 

Sergey Beryozkin commented on CXF-2873:
---------------------------------------

Hi Tomasz - please verify that it can work over HTTPS as the basic authentication alone is not secure;

For the optional features JIRA, if you get the time left, you might want to consider adding a support for WSSE username/token profile (with no SOAP), password will be hashed, not terribly secure too, but might do... - this can be discussed on the dev list


> Add authentication support (via HTTP basic authentication)
> ----------------------------------------------------------
>
>                 Key: CXF-2873
>                 URL: https://issues.apache.org/jira/browse/CXF-2873
>             Project: CXF
>          Issue Type: Sub-task
>            Reporter: Tomasz Oponowicz
>


-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.