Book Image

Spring Web Services 2 Cookbook

By : Hamidreza Sattari, Shameer Kunjumohamed
Book Image

Spring Web Services 2 Cookbook

By: Hamidreza Sattari, Shameer Kunjumohamed

Overview of this book

<p>Spring Web Services is a product of the Spring community focused on creating document-driven Web services.<br /><br />Spring Web Services aims to facilitate contract-first SOAP service development, allowing for the creation of flexible web services using one of the many ways to manipulate XML payloads.<br /><br />This comprehensive guide -- which provides professional expertise on a variety of technical topics right from setting-up a contract-first Web-Service, creating client of a Web-Service to serialization, monitoring, testing and security using Spring-WS -- helps you enhance your skills in Spring Web Services.<br /><br />Spring Web Services 2 Cookbook includes a wide variety of recipes that covers most important topics used in real-world applications. It is a well-rounded guide covering a lot of ground in the Spring Web Services domain using systematic arranged chapters and focused recipes.<br /><br />The book begins with setting up a contract first Web Service over various protocols such as JMS, XMPP, and Email. The next chapter targets creating clients for SOAP Web Services. We then learn how to test and monitor the Web Service using tools like soapUI and TCPMon. Building on, logging, tracing and exception handling are detailed in the subsequent chapter. The book then covers marshalling and unmarshalling using different technologies like JAXB2, XMLBeans, JibX, XStream, MooseXML etc. Securing WebServices through authentication, authorization, encryption and decryption and digital signature using Spring-WS features based on XWSS and WSS4J Libraries is outlined in the next chapter two chapters. The book then tackles development of RESTful Web Services. Finally, Setting up Web Services using Spring Remoting based on various technologies like HTTP , RMI, JMS, JAXWS and a Web Service using Apache CXF on JAX-WS front-end are explained.<br /><br />This book will help relatively new developers in accelerating their learning process and experienced developers in expanding their skills sets of Spring Web Services.</p>
Table of Contents (17 chapters)
Spring Web Services 2 Cookbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Authenticating a Web-Service call using plain/digested username token


Authentication simply means checking whether callers of a service are who they claim to be. One way of checking the authentication of a caller is to check the password.

XWSS provides APIs to get the usernames and passwords from incoming SOAP messages and compare them with what is defined in the configuration file. This goal will be accomplished by defining policy files for the sender and the receiver of the messages that on the sender side, client includes a username token in outgoing messages, and on the receiver side, the server expects to receive this username token along with the incoming messages for authentication.

Transmitting a plain password makes a SOAP message unsecured. XWSS provides the configuration setting in the policy file to include a digest of passwords (a hash generated from the password text by a specific algorithm) inside the sender message. On the server side, the server compares the digested password...