Re: CXF Proxy (Consumer to Provider Bridge) with http basic auth

[Freeman Fang]

Hi Markus,

For cxf bc, it can't bridge the basic auth since basic auth is in the 
http header, what we save from soap message to jbi message is the soap 
header, so if your standalone client and server are using ws-security to 
do the auth, it should be bridged by the cxf bc consumer and provider.

Freeman

Markus Wolf wrote:
Hi,

thanks for your reply. Yes I missed your last reply, something was 
wrong with my mailinglist subscription.

Our usecase require the authentication credentials on a pre user base. 
This means we would like to proxy the authentication information as 
well as the webservice. Is it possible to set the credentials 
dynamically from the consumer to the provider? The busCfg seems to be 
static with exactly one username/password pair.

Thanks
Markus

You can add busCfg attribute (let's say busCfg="basic_auth.xml") for 
your cxf bc provider xbean,
and your basic_auth.xml should be like

<beans xmlns="http://www.springframework.org/schema/beans";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xmlns:sec="http://cxf.apache.org/configuration/security";
xmlns:http="http://cxf.apache.org/transports/http/configuration";
xmlns:jaxws="http://java.sun.com/xml/ns/jaxws";
xsi:schemaLocation="
           http://cxf.apache.org/configuration/security
              http://cxf.apache.org/schemas/configuration/security.xsd
         http://cxf.apache.org/transports/http/configuration
            http://cxf.apache.org/schemas/configuration/http-conf.xsd
         http://www.springframework.org/schema/beans
            
http://www.springframework.org/schema/beans/spring-beans-2.0.xsd";>

 <http:conduit name="{your_name_space}your_endpoint_name.http-conduit">
             <http:authorization>
        <sec:UserName>Betty</sec:UserName>
        <sec:Password>password</sec:Password>
     </http:authorization>

 </http:conduit>

</beans>

You can get more details about the http transport configuration from [1]


[1]http://cwiki.apache.org/CXF20DOC/client-http-transport-including-ssl-support.html 


btw, I think you miss my reply for this issue during weekend
Regards
Freeman

Markus Wolf wrote:
Hi,

we need to proxy a webservice with smx. No problem with this, since
enough examples are given.  :)
But our 3rd party webservice requires http-basic auth and we are
struggeling in configuring smx to proxy the authentication. Is there a
way to do so? If not, is it possible to proxy ws-security headers?

We tried to use cxf and http based provider/consumer setup and both 
failed.

Thanks for any hint
Markus Wolf