Web Service Authentication

[Ephraim Paka]

Hello All,

How do we implement a security for web services? Since service components are either loosley coupled or have no client session tracking
like web based clients. What happens once a client is authorized and either
tries to invoke a service method or looses connection and reconnects?

Thanks

[Ulf Dittmer]

Since WS are generally stateless, you'd need to send the authentication details with every call. But since that's usually being done by a handler that's independent from the actual WS invocation code, it wouldn't complicate the client code.

[Ephraim Paka]

Thanks Ulf

[susha bhogs]

Following is a nice presentation from BEA WBELOGIC -

https://www120.livemeeting.com/cc/bea/viewFormatWMMticketID=z8mxkpjs497cp70m

[Ulf Dittmer]

Originally posted by susha bhogs:
Following is a nice presentation from BEA WBELOGIC -

https://www120.livemeeting.com/cc/bea/viewFormatWMMticketID=z8mxkpjs497cp70m

... which seems to be protected.