On further analysis, I don't think I actually need SecureConversation etc. We already have an existing custom token generator that I just need to "wire-in"
All I need is to use a custom type of BinarySecurityToken, set by the server on first authentication, and passed to, and by, the client subsequently. Does anyone have an example of how a server can send a custom BinarySecurityToken to a client using WSS4J? Regards Ben Hutchison > -----Original Message----- > From: Davanum Srinivas [mailto:[EMAIL PROTECTED] > Sent: Friday, December 23, 2005 1:13 PM > To: Hutchison, Ben > Cc: [email protected] > Subject: Re: What support level for <SecurityContextToken> and > SecureSonversation in WSS4J? > > See > http://svn.apache.org/repos/asf/webservices/wss4j/trunk/samples/org/apac he > /ws/sandbox/security/trust2/samples/ > > > thanks, > dims > > On 12/22/05, Hutchison, Ben <[EMAIL PROTECTED]> wrote: > > > > > > > > Hi WSS4J developers, > > > > > > > > I am wondering whether the <SecurityContextToken> and SecureConversation > > APIs are currently "operational" in WSS4J? > > > > > > > > I noticed that they exist in the code but are largely undocumented. I > was > > not able to locate unit tests or samples that use the > SecurityContextToken > > class. There is also very little discussion of the APIs WRT WSS4J in any > > online blogs, forums etc. > > > > > > > > If it is working, would you be able to post or direct me to some example > > code demonstrating how to use these features. > > > > > > > > The problem that we are looking to solve is how to pass around a session > > token granting access a certain resource using WSS4J and AXIS, without > > including it in the SOAP body. > > > > > > > > Regards > > > > Ben Hutchison > > > > > > > > > > > > Please note that Goldman Sachs JBWere makes important disclosures of its > > interests at http://www.gsjbwere.com/Disclosures > > > > GOLDMAN SACHS JBWERE PTY LTD DISCLAIMER > > Goldman Sachs JBWere Pty Ltd and its related entities distributing this > > document and each of their respective > > directors, officers and agents ("Goldman Sachs JBWere Group") believe > that > > the information contained in this > > document is correct and that any estimates, opinions, conclusions or > > recommendations contained in this > > document are reasonably held or made as at the time of compilation. > However, > > no warranty is made as to > > the accuracy or reliability of any estimates, opinions, conclusions, > > recommendations > > (which may change without notice) or other information contained in this > > document and, to the maximum > > extent permitted by law, Goldman Sachs JBWere Group disclaims all > liability > > and responsibility for any > > direct or indirect loss or damage which may be suffered by any recipient > > through relying on anything > > contained in or omitted from this document. This document is for the > > intended recipient only and is > > provided on the condition that you keep it confidential and do not copy > or > > circulate it in whole or in part. > > No part of this document may be reproduced without the permission of > Goldman > > Sachs JBWere Group. > > Copyright in this document is owned by Goldman Sachs JBWere Pty Ltd. The > > Goldman Sachs JBWere Group > > does not represent or warrant that any attached files are free from > computer > > viruses or other defects. > > Any files provided may only be used on the basis that the user assumes > all > > responsibility for any loss, > > damage or consequence resulting directly or indirectly from their use. > The > > liability of the > > Goldman Sachs JBWere Group is limited in any event to either the > resupply of > > the attached files or > > the cost of having the attached files resupplied. All reasonable efforts > are > > made to prevent > > dissemination of viruses through the electronic portal. > > > > Copyright in this document is owned by > > Goldman Sachs JBWere Pty Ltd. 2005 Goldman Sachs JBWere Pty Ltd, ABN 21 > 006 > > 797 897, AFSL 243346. > > All rights reserved. > > > > If you do not wish to receive future communications of this nature, you > can > > unsubscribe by going to: > > > > http://www.gsjbwere.com/Unsubs/[EMAIL PROTECTED] > > > > If you require any further information regarding our SPAM policy, please > > email [EMAIL PROTECTED] > > Goldman Sachs JBWere Group 1300 366 790 or (61 3) 9679 1534 > > > -- > Davanum Srinivas : http://wso2.com/blogs/ Please note that Goldman Sachs JBWere makes important disclosures of its interests at http://www.gsjbwere.com/Disclosures GOLDMAN SACHS JBWERE PTY LTD DISCLAIMER Goldman Sachs JBWere Pty Ltd and its related entities distributing this document and each of their respective directors, officers and agents ("Goldman Sachs JBWere Group") believe that the information contained in this document is correct and that any estimates, opinions, conclusions or recommendations contained in this document are reasonably held or made as at the time of compilation. However, no warranty is made as to the accuracy or reliability of any estimates, opinions, conclusions, recommendations (which may change without notice) or other information contained in this document and, to the maximum extent permitted by law, Goldman Sachs JBWere Group disclaims all liability and responsibility for any direct or indirect loss or damage which may be suffered by any recipient through relying on anything contained in or omitted from this document. This document is for the intended recipient only and is provided on the condition that you keep it confidential and do not copy or circulate it in whole or in part. No part of this document may be reproduced without the permission of Goldman Sachs JBWere Group. Copyright in this document is owned by Goldman Sachs JBWere Pty Ltd. The Goldman Sachs JBWere Group does not represent or warrant that any attached files are free from computer viruses or other defects. Any files provided may only be used on the basis that the user assumes all responsibility for any loss, damage or consequence resulting directly or indirectly from their use. The liability of the Goldman Sachs JBWere Group is limited in any event to either the resupply of the attached files or the cost of having the attached files resupplied. All reasonable efforts are made to prevent dissemination of viruses through the electronic portal. Copyright in this document is owned by Goldman Sachs JBWere Pty Ltd. 2005 Goldman Sachs JBWere Pty Ltd, ABN 21 006 797 897, AFSL 243346. All rights reserved. If you do not wish to receive future communications of this nature, you can unsubscribe by going to:http://www.gsjbwere.com/Unsubs/[EMAIL PROTECTED] If you require any further information regarding our SPAM policy, please email [EMAIL PROTECTED] Goldman Sachs JBWere Group 1300 366 790 or (61 3) 9679 1534 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
