AXIS2 Secure SOAP/REST

[axelspin <sp...@knmi.nl>]

Hi, I am developing webservices with Axis2, and I would like to keep both
RESTful and SOAP interfaces to my services, providing authentication. what
could be a good strategy? 
-- 
View this message in context: http://www.nabble.com/AXIS2-Secure-SOAP-REST-tf4110788.html#a11688710
Sent from the Axis - User mailing list archive at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org

Re: AXIS2 Secure SOAP/REST

[Anne Thomas Manes <at...@gmail.com>]

If by REST, you mean "plain old XML" (POX) over HTTP (i.e., no SOAP
envelope), then you must rely on HTTP security mechanisms:
- HTTP Basic or Digest Authentication
- HTTPS SSL authentication
- HTTPS SSL encryption

HTTP security mechanisms support point-to-point security only -- not
end-to-end security. If you require stronger security measures than
can flow across proxies and intermediaries or that support stronger
authentication mechanisms, then you should use SOAP.

Anne

On 7/19/07, axelspin <sp...@knmi.nl> wrote:
>
> Hi, I am developing webservices with Axis2, and I would like to keep both
> RESTful and SOAP interfaces to my services, providing authentication. what
> could be a good strategy?
> --
> View this message in context: http://www.nabble.com/AXIS2-Secure-SOAP-REST-tf4110788.html#a11688710
> Sent from the Axis - User mailing list archive at Nabble.com.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
> For additional commands, e-mail: axis-user-help@ws.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: axis-user-unsubscribe@ws.apache.org
For additional commands, e-mail: axis-user-help@ws.apache.org