How to include Authrozitaion information in a WSDL file

[Ravi Kiran Va]

Hi

I am depending on Authorization feature of SOAP for my webservice.

Means that i want to have something like this in my WSDL file :

<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/
envelope/">
<soap:Header>
<AuthHeader xmlns="http://tempuri.org/">
<UserName>jeff</UserName>
<Password>imbatman</Password>
</AuthHeader>
</soap:Header>
</soap:Envelope>

How can i associate this with my Webservice now ??

Please help .

Thank you .

[Hany Shafik]

You can declare using WSDL that your webservice require the bellow header as part of it's soap message.

For example you can edit your WSDL to include the following or you can configure your tool to generate a WSDL that is similar to the following

 
<types>
  <schema targetNamespace="http://test.com/order"
           xmlns="http://www.w3.org/2001/XMLSchema">
     <xsd:complexType name="AuthenticationType"> 
       <xsd:sequence> 
         <xsd:element name="UserName" type="xsd:String"/> 
         <xsd:element name="Password" type="xsd:String"/> 
    </xsd:complexType>
    <xsd:element name="AuthHeader" type="AuthenticationType"/> 
</xsd:complexType> 


  </schema>
</types>

...
<message name="authentication">
  <part name="authenticationPart" element="xsd1:AuthHeader"/>
</message>
... 
<binding name="orderBinding" type="tns:order">
  <soap:binding style="document" transport="http://schemas.xmlsoap.org/soap/http"/>
<operation name="placeOrder">
      <soap:operation soapAction="" style="document"/>
      <input name="order">
        <soap:body use="literal"/>
        <soap:header message="tns:authentication" part="authenticationPart"/>
      </input>
      <output name="bill">
        <soap:body use="literal"/>
      </output>
  </operation>
</binding>
..

[Ivan Krizsan]

Hi!
Have you considered WS-Policy?
Using the Metro libraries on the client side, the client will automatically interpret any WS-Policy elements in the WSDL.
Best wishes!

[Ravi Kiran Va]

Thank you i am not about bothered about the WSDL file as it will be automatically generated by the server

I am implementing security to my webmethod by using @RolesAlowed

import javax.annotation.security.RolesAllowed;

 @RolesAllowed( { "admin" })

 public void createAccount()

 {
 }