We currently have a home-grown ESB application that is built using Apache Axis2/Rampart 1.6.2 that we are in the process of re-architecting as separate Gateway and Service Container components. Our goal is to have a Gateway application that is responsible for security processing, throttling, and routing and then behind that we will have multiple clusters of Service Containers that are customized according to the specific needs of that line of business. The Gateway will validate the request and then based on information contained in a custom header, forward it on to the appropriate Service Container which will handle actually fulfilling the request. The issue is that we want the Gateway to be as efficient as possible and even though WSS4J parses the XML to validate the signature, we want to avoid the serialization and deserialization between XML and Java beans that happens in Axis2 and CXF.
We are still evaluating CXF vs Axis2 for use in the Service Containers – we have a significant catalog of services that are already implemented using Axis2, so it is probably the preferred approach right now just so we don’t have to re-implement all of those services. I am a bit concerned, however, that CXF seems to have a much more active community at this time. Thanks, Wally From: Colm O hEigeartaigh [mailto:[email protected]] Sent: Tuesday, January 27, 2015 5:29 AM To: [email protected] Subject: Re: Question about WSS4J 2.0.2 The official binary distribution for WSS4J 2.0.x is in maven: http://repo.maven.apache.org/maven2/org/apache/wss4j/ We don't ship a separate standalone binary distribution as for 1.6.x. As for new features, most of them are tied into CXF. What use-cases are you interested in? Are you using WSS4J with CXF or with another product? Colm. On Mon, Jan 26, 2015 at 3:57 PM, Wally Dennis <[email protected]<mailto:[email protected]>> wrote: Hello, Is there a binary package available for version 2.0.2 of WSS4J like there is for earlier versions (ie – 1.6.17)? I have been able to build the jars from the source using Maven, but am concerned about the many dependent jars and want to make sure I have a “good” package to start with. Also, is there any sample code for using the newer features that are included in the 2.x version of the library? Thanks, Wally Dennis -- Colm O hEigeartaigh Talend Community Coder http://coders.talend.com
