Issue Details (XML | Word | Printable)

Key: OPENEJB-1004
Type: Improvement Improvement
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Jean-Louis MONTEIRO
Reporter: Jonathan Gallimore
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
OpenEJB

Web service endpoints securable

Created: 02/Mar/09 09:23 PM   Updated: 27/May/09 06:33 AM
Return to search
Component/s: webservices
Affects Version/s: 3.1
Fix Version/s: 3.1.1

Time Tracking:
Not Specified

File Attachments:
  Size
Text File Licensed for inclusion in ASF works patch-openejb-1004.txt 2009-04-22 02:28 PM Jean-Louis MONTEIRO 71 kB

Resolution Date: 27/May/09 06:33 AM


 Description  « Hide
It does not appear to be possible to secure webservice endpoints at the moment, therefore EJB session beans exposed as webservices will not work if they use the @RolesAllowed annotation.

It would be nice to pass the values specified in the <web-service-security> tag in openejb-jar.xml were passed through to Tomcat/OpenEJB HTTP container, and to potentially support WS-Security schemes as well.

 All   Comments   Work Log   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Repository Revision Date User Message
ASF #751297 Sat Mar 07 16:57:34 UTC 2009 jgallimore OPENEJB-1004 added basic HTTP auth and Username/Password WS-Security authentication to EJB Webservice endpoints
Files Changed
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org
ADD /openejb/trunk/openejb3/examples/webservice-ws-security
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/config/AppInfoBuilder.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources/META-INF
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/core/webservices/PortData.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/resources/groups.properties
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/resources
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org
ADD /openejb/trunk/openejb3/container/openejb-core/src/test/java/org/apache/openejb/config/AppInfoBuilderTest.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz/calculator/CalculatorImpl.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org/superbiz
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org/superbiz/calculator/CalculatorRemote.java
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/CxfWsContainer.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/resources/META-INF/openejb-jar.xml
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org/superbiz/calculator
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java
MODIFY /openejb/trunk/openejb3/assembly/openejb-tomcat/openejb-tomcat-catalina/src/main/java/org/apache/openejb/tomcat/catalina/TomcatWsRegistry.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/resources/META-INF/ejb-jar.xml
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org/superbiz/calculator/CalculatorTest.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz/calculator/CalculatorRemote.java
MODIFY /openejb/trunk/openejb3/examples/pom.xml
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/openejb-jar.xml
ADD /openejb/trunk/openejb3/server/openejb-webservices/src/main/java/org/apache/openejb/server/webservices/BasicAuthHttpListenerWrapper.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/java/org/superbiz
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/ejb/EjbWsContainer.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/ejb/EjbEndpoint.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/ejb-jar.xml
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org/superbiz/calculator
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/java/org
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test
MODIFY /openejb/trunk/openejb3/server/openejb-webservices/src/main/java/org/apache/openejb/server/webservices/WsService.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org/superbiz/calculator/CalculatorImpl.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org/superbiz
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/java/org/superbiz/calculator/CalculatorWs.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/resources/users.properties
ADD /openejb/trunk/openejb3/examples/webservice-security/pom.xml
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources/groups.properties
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/java/org/superbiz/calculator/CalculatorTest.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz/calculator/CalculatorWs.java
MODIFY /openejb/trunk/openejb3/container/openejb-jee/src/main/java/org/apache/openejb/jee/oejb2/AuthMethodType.java
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/assembler/classic/PortInfo.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources/users.properties
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/pom.xml
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/resources/META-INF
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/assembler/classic/WsBuilder.java
ADD /openejb/trunk/openejb3/examples/webservice-security
MODIFY /openejb/trunk/openejb3/server/openejb-webservices/src/main/java/org/apache/openejb/server/webservices/OpenEJBHttpWsRegistry.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/java/org/superbiz/calculator
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test/java
ADD /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/ServerPasswordHandler.java
ADD /openejb/trunk/openejb3/examples/webservice-security/src/main/resources
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/pom.xml
ADD /openejb/trunk/openejb3/examples/webservice-security/src/test
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz/calculator

Repository Revision Date User Message
ASF #768087 Thu Apr 23 23:11:26 UTC 2009 jgallimore OPENEJB-1004 webservice-security patch from Jean-Louis.
Files Changed
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/keys/generateServerKey.bat
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/core/webservices/JaxWsUtils.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/keys
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources/META-INF/CalculatorImplUsernameTokenPlainPasswordEncrypt-client.properties
ADD /openejb/trunk/openejb3/examples/jpa-eclipselink/src/test/java/org/superbiz/injection
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/CalculatorImplUsernameTokenPlainPasswordEncrypt-server.properties
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/assembler/classic/PortInfo.java
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/config/WsDeployer.java
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/ejb/EjbEndpoint.java
MODIFY /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/ejb-jar.xml
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/config/AppInfoBuilder.java
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/core/webservices/PortData.java
MODIFY /openejb/trunk/openejb3/server/openejb-client/src/main/java/org/apache/openejb/client/ClientSecurity.java
MODIFY /openejb/trunk/openejb3/examples/webservice-ws-security/pom.xml
MODIFY /openejb/trunk/openejb3/container/openejb-jee/src/main/java/org/apache/openejb/jee/oejb2/WebServiceSecurityType.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/webservices.xml
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/assembler/classic/WsBuilder.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/resources/META-INF/CalculatorImplSign-client.properties
ADD /openejb/trunk/openejb3/server/openejb-cxf/src/main/java/org/apache/openejb/server/cxf/ConfigureCxfSecurity.java
MODIFY /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org/superbiz/calculator/CalculatorTest.java
ADD /openejb/trunk/openejb3/container/openejb-core/src/test/resources/altddapp/META-INF
ADD /openejb/trunk/openejb3/container/openejb-core/src/test/resources/altddapp/META-INF/test.ejb-jar.xml
ADD /openejb/trunk/openejb3/container/openejb-core/src/test/resources/altddapp
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/test/java/org/superbiz/calculator/CustomPasswordHandler.java
MODIFY /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/openejb-jar.xml
MODIFY /openejb/trunk/openejb3/server/openejb-cxf/pom.xml
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/keys/generateKeyPair.bat
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/test/java/org/apache/openejb/config/AppInfoBuilderTest.java
MODIFY /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/java/org/superbiz/calculator/CalculatorImpl.java
ADD /openejb/trunk/openejb3/examples/webservice-ws-security/src/main/resources/META-INF/CalculatorImplSign-server.properties
MODIFY /openejb/trunk/openejb3/container/openejb-core/src/main/java/org/apache/openejb/persistence/JtaEntityManagerRegistry.java