Hi all

In JBOSS-4.0.3 it was possible to get the client certificate used in the https 
session of a WebService request in order to authorize the web client. 

I used the code that worked:
                        MessageContext messageContext = 
context.getMessageContext();
  |               HttpServletRequest request = (HttpServletRequest) 
messageContext.getProperty("transport.http.servletRequest");
  |                               
  |               Enumeration enumer = request.getAttributeNames();
  |               while(enumer.hasMoreElements()){
  |                       System.out.println(enumer.nextElement());
  |               }
  |               
  |               X509Certificate[] certificates = (X509Certificate[]) 
request.getAttribute("javax.servlet.request.X509Certificate");

I have now also tested 
HttpServletRequest request = (HttpServletRequest) 
messageContext.getProperty("javax.xml.ws.servlet.request");

with JBOSS-4.0.4-p1 but the request seem not to return any attributes.

Can anyone give me an example of how to achieve this in any way using 
jboss-4.0.4-GA

WS-Security signing/encryption is not an option in my case. 

Thankfull for any help
Philip

View the original post : 
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3970326#3970326

Reply to the post : 
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3970326
_______________________________________________
jboss-user mailing list
[email protected]
https://lists.jboss.org/mailman/listinfo/jboss-user

Reply via email to