security - Have Java Web Service execute under different context -
we have java 1.4 web service running on aix 5. want have web service methods execute under context of caller, not hosting web server. how go this?
you should able perform jaas authentication (just normal j2ee web application), establish principals associated subject. container automatically ensures current worker thread associated identified subject. subject , principals propagated down service/business tier case normal servlet.
it might worthwhile determine web service security features of underlying application server, might offer more features basic/digest/form authentication functionality present in jaas. example, weblogic server allows certificate based authentication of web service clients (with configuration involved), , might true of application server you're using well. usually, container security features ride on top of jaas , related security features in j2ee 1.4, thereby ensuring j2ee security features used in other sections of application continue perform expected.
Comments
Post a Comment