Hello I 've made a an axis 2 web service which stores the user hashed
password in a database.
So it's obvious that I shold add some kind of security to my web service so i
use rampart!
But it's written that in a real application, you'd naturally
want to use some other mechanism (such as a database or an external
security mechanism) to verify the username and password combination.
so it seems that I can't understand how to make the implementtion - so I will
hash password with salt salt and to store it in a database and then I don't
know what to do next.
could you recommend the steps
So you will see that in my request from javascript the password is also seen so
it seens that this should also be changes!
Thank you in advance!
and here is my password callabck class
p
ublic
classPWCBHandlerimplementsCallbackHandler{publicvoidhandle(Callback[]callbacks)throwsIOException,UnsupportedCallbackException{for(inti
=0;i <callbacks.length;i++//When the server side need to authenticate the
userWSPasswordCallbackpwcb
=(WSPasswordCallback)callbacks[i];if(pwcb.getIdentifier().equals("bob")){pwcb.setPassword("bobPW");}}//When
the client requests for the password to be added in to the //UT element}
and here is the request from javascrip
------------------------------------------------------------
var sr =
"<?xml version=\"1.0\" encoding=\"utf-8\"?>" +
"<soapenv:Envelope " +
"xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\"; " +
"xmlns:nlo=\"http://nlo\";>"+
"<soapenv:Header>"+
'<wsse:Security
xmlns:wsse=\"http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd\";
soapenv:mustUnderstand="1">'+
'<wsse:UsernameToken
xmlns:wsu="http://docs.oasisopen.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd";
wsu:Id="123">'+
'<wsse:Username>bob</wsse:Username>'+
'<wsse:Password
Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText";>bobPW</wsse:Password>'+
'</wsse:UsernameToken>'+
'</wsse:Security>'+
"</soapenv:Header>"+
"<soapenv:Body>" +
"<nlo:InsertIntoDB>" +
'<nlo:data>'+xml+'</nlo:data>' +
' </nlo:InsertIntoDB>'+
'</soapenv:Body>' +
'</soapenv:Envelope>';
xmlhttp.onreadystatechange = function ()
{
if (xmlhttp.readyState == 4)
{
if (xmlhttp.status == 200)
{
alert(xmlhttp.responseText);
}
}
}
// Send the POST request
xmlhttp.open('POST',
'http://localhost:8080/axis2/services/hash_pass_security?wsdl', true);
xmlhttp.setRequestHeader('Content-Type', 'text/xml');
xmlhttp.send(sr);
// send request
}
}
