SOAP authentication and session help

[Jonathan Yue <jo...@infonox.com>]

Hi, all,

I just signed up to this list and would like your help:

1. we want to use Apache messagerouter servlet to request/respond XML
messages
2. First, the server authenticates the client.
3. between successive messages, a session is maintained for this client.
4. multiple XML messages (reauest/response) are exchanged
5. client logs out, session is closed.

I read the Apache/SOAP documents/FQAs, and found no httpsession inforomation
in the Envelope and SOAPContext objects. How can I get the session cookie
from the
httpsession?

Using javaclient, how can the client's certificate be sent to the HTTPS
server for
authentication? Does SOAP have a way for authentication?

In the example (addressbook2), the setMaintainSession is for calls using
RPC.
Is session handled in Message calls (not RPC)?


Please help, thanks a million.

Regards,
Jonathan