posted 16 years ago
That depends on your definition of "complete" - everyone has his own concept of how much security is sufficient.
For WS, there is the WS-Security standard, for which an open source implementation is available in the form of WSS4J. WS-Security addresses authentication (by username/password and client certificates), as well as encryption. You can find links to the standard and the software in the WS FAQ.