security - Have Java Web Service execute under different context -


we have java 1.4 web service running on aix 5. want have web service methods execute under context of caller, not hosting web server. how go this?

you should able perform jaas authentication (just normal j2ee web application), establish principals associated subject. container automatically ensures current worker thread associated identified subject. subject , principals propagated down service/business tier case normal servlet.

it might worthwhile determine web service security features of underlying application server, might offer more features basic/digest/form authentication functionality present in jaas. example, weblogic server allows certificate based authentication of web service clients (with configuration involved), , might true of application server you're using well. usually, container security features ride on top of jaas , related security features in j2ee 1.4, thereby ensuring j2ee security features used in other sections of application continue perform expected.


Comments

Popular posts from this blog

windows - Why does Vista not allow creation of shortcuts to "Programs" on a NonAdmin account? Not supposed to install apps from NonAdmin account? -

c++ - How do I get a multi line tooltip in MFC -

unit testing - How to mock PreferenceManager in Android? -