Ok, a bit of digging around-
I found the remoteCentralAuthenticationService and
xFireCentralAuthenticationService beans defined and commented. The comment
asked for the bean to be uncommented in order to allow access as a web service
(using xFire, which is good). Here is what I was thinking-
1. >From client stub (of my web service that is to be exposed), pass
credentials and query remoteCAS for a ticket.
2. Pass the ticket to my web service.
3. Validate the ticket from my web service (the actual implementation of the
service to be exposed). If the ticket validates, then go ahead with the
service. ELse fail.
Does this seem to make sense?
Questions-
1. Once a ticket is used/validated, it is no longer recognized by CAS. So, this
essentially means my web service stub needs to validate everytime the client
accesses the web service. So, how do I obtain a ticket that lasts longer than 1
call?
2. This method seems to require code changes to my web service (the
implementation of the service). That doesn't sound right. I should be able to
somehow use some existing class to intercept the call to the service and
validate the ticket...
Any pointers?
Thanks.
----- Original Message ----
From: tedzo <[EMAIL PROTECTED]>
To: Yale CAS mailing list <[email protected]>
Sent: Monday, October 8, 2007 10:55:57 AM
Subject: Authenticating web service calls via CAS..
I have a webapp that uses CAS for authentication. All that works fine. Now I
need to expose some underlying operations as a web service and I plan to use
XFire for that. I am trying to figure out if I can use CAS to authenticate the
webservice invocation from the client. Can someone provide me with some
pointers? I searched the archives and found a thread about this but not a whole
lot-
http://tp.its.yale.edu/pipermail/cas/2006-June/002882.html (the links provided
in this thread are not functional anymore). Scott Battaglia mentions having
some web service support for XFire. I couldn't find out more...
Thanks.
Fussy? Opinionated? Impossible to please? Perfect. Join Yahoo!'s user panel and
lay it on us.
____________________________________________________________________________________
Pinpoint customers who are looking for what you sell.
http://searchmarketing.yahoo.com/_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
