Web Service Security

HI Guys,

Suppose, i developed a web service. But i want only members to access my web service. How do i provide authentication in my web service in client side?

Thanks for your answers.

Look up ws-security for whatever web service framework you're using (Axis, Jax-WS etc).

Hi Aseem :)

You really like those web services, just like Tolls do :)

Well, this time things won't be that easy for you,
but you are web service guru now :)

How much do you really know about security and authentication in web apps?

Basic auth, digest auth, form auth, using headers, public keys, certificates,
keytool, SSL, soap header security params... ???

Takes a lot of time and patience to learn all those things and choose right
one which will solve your problem.

At the end you may end up with solution described here:
Implementing WS-Security

...but it will taka a days for you to understand and implement it
if you are at beginning with this issue

Is there a shortcut for you?
Well there are few Basic Authentication examples around but let's first talk about :

- what you really need???
Is server on Internet or Intranet?
Can anyone become user?
Are we skipping SSL, certificates...and just need basic auth with username and pass stored in DB on server, all with with some security in soap header ?

Speak to us man! So we can deal with security paranoia in right way ;)

cheers!

Tolls and Fon,

i know how to do now. But the basic one,using basic HTTP authentication.
Thank you guys.