You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-user@axis.apache.org by Denise Wu <wa...@gmail.com> on 2011/05/20 14:39:23 UTC
securing REST webservices
Hi,
I have a RESTful webservice I need to secure using rampart. I used as
a starting point the sample 07 in rampart distribution and that allows
both Encrypt and Sign of messages.
I added to the client code the following lines:
options.setProperty(Constants.Configuration.ENABLE_REST, Constants.VALUE_TRUE);
client.setOptions(options);
I am getting the following error:
WSDoAllReceiver: Incoming message does not contain required Security header
Is rampart encryption and signing compatible with REST?
If not how to secure RESTful webservices?
Thanks
---------------------------------------------------------------------
To unsubscribe, e-mail: java-user-unsubscribe@axis.apache.org
For additional commands, e-mail: java-user-help@axis.apache.org
Re: securing REST webservices
Posted by sumedha rubasinghe <su...@apache.org>.
On Fri, May 20, 2011 at 6:09 PM, Denise Wu <wa...@gmail.com> wrote:
> Hi,
>
> I have a RESTful webservice I need to secure using rampart. I used as
> a starting point the sample 07 in rampart distribution and that allows
> both Encrypt and Sign of messages.
> I added to the client code the following lines:
>
> options.setProperty(Constants.Configuration.ENABLE_REST, Constants.VALUE_TRUE);
> client.setOptions(options);
>
> I am getting the following error:
>
> WSDoAllReceiver: Incoming message does not contain required Security header
>
> Is rampart encryption and signing compatible with REST?
> If not how to secure RESTful webservices?
Check this - http://blog.facilelogin.com/2011/02/securing-restfull-services.html
Recording is also available.
/sumedha
>
> Thanks
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
> For additional commands, e-mail: java-dev-help@axis.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org
Re: securing REST webservices
Posted by sumedha rubasinghe <su...@apache.org>.
On Fri, May 20, 2011 at 6:09 PM, Denise Wu <wa...@gmail.com> wrote:
> Hi,
>
> I have a RESTful webservice I need to secure using rampart. I used as
> a starting point the sample 07 in rampart distribution and that allows
> both Encrypt and Sign of messages.
> I added to the client code the following lines:
>
> options.setProperty(Constants.Configuration.ENABLE_REST, Constants.VALUE_TRUE);
> client.setOptions(options);
>
> I am getting the following error:
>
> WSDoAllReceiver: Incoming message does not contain required Security header
>
> Is rampart encryption and signing compatible with REST?
> If not how to secure RESTful webservices?
Check this - http://blog.facilelogin.com/2011/02/securing-restfull-services.html
Recording is also available.
/sumedha
>
> Thanks
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
> For additional commands, e-mail: java-dev-help@axis.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: java-user-unsubscribe@axis.apache.org
For additional commands, e-mail: java-user-help@axis.apache.org