Matthew, If you go for basic authentication, you can use request.getRemoteUser() or request.getUserPrincipal().
Instead of implemention your own authorization mechanism, you may consider to define your web services in Spring (http://xfire.codehaus.org/Spring) and use Acegi (http://www.acegisecurity.org/) for method and/or object authorization. -Øyvind -----Original Message----- From: Matthew Kerle [mailto:[EMAIL PROTECTED] Sent: Thu 2007-08-16 07:28 To: [email protected] Subject: Re: [xfire-user] http basic auth documentation doh! how to get the request/response Objects: http://xfire.codehaus.org/HTTP+Transport HttpServletRequest request = XFireServletController.getRequest(); HttpServletResponse response = XFireServletController.getResponse(); my bad... now to test passing SOAP headers (still haven't decided which to use, Soap headers or http Basic auth)... Matthew Kerle wrote: > thanks Yogesh, that sounds close to what I want! Once I have the > messagecontext how would I access either HTTP Headers or SOAP headers? > > I looked at the API page > (http://envoisolutions.com/xfire/api/org/codehaus/xfire/MessageContext.html), > and it's not obvious... > > I'm assuming you could do something like: > > public String echo(String echo, MessageContext context){ > Element header = context.getCurrentMessage().getHeader() > //what do you do with the element here to access specific SOAP > headers, eg - 'user', 'pass' > // also, what if you wanted the original HttpServletRequest object? > return echo; > } > > thanks again! -- * Matthew Kerle * * IT Consultant * * Canberra, Australia* Mobile: +61404 096 863 Email: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> Web: Matthew Kerle <http://threebrightlights.blogspot.com/> --------------------------------------------------------------------- To unsubscribe from this list please visit: http://xircles.codehaus.org/manage_email
<<winmail.dat>>
---------------------------------------------------------------------
To unsubscribe from this list please visit:
http://xircles.codehaus.org/manage_email
