Details
-
Wish
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
Moderate
Description
https://datatracker.ietf.org/doc/draft-cavage-http-signatures/ is a great standard for e2e integrity, and is supported very well in CXF for JAX-RS: http://cxf.apache.org/docs/jax-rs-http-signature.html.
Since the spec is generic for http requests it would be great if the same could be supported when calling jax-ws services. I am aware of the support for WS-security in https://cxf.apache.org/docs/ws-security.html etc - but it would be preferrable to have one normalized model if possible.