Http Basic Authentication / GET and POST differences?

[boopet]

Hello,

we are using a JBossWS 2.0.1 client to access a Axis2 Webservice secured with Http Basic Authentication.

The client side gets username and password to login this way:

BindingProvider.getRequestContext().put(BindingProvider.USERNAME_PROPERTY, "username");
..

The authentication to the webservice does only work, if GET requests to the WSDL file are excluded from the htaccess protection at the server side.

obviosly the login credentials are only sent with POST requests to the webservice methods.

Does anyone know, if this is intended to be this way? Is there a way to also authenticate for GET requests with the JBossWS client?


thanks
norbert

[asoldano]

IOW you get a not-authorized error while trying to retrieve the wsdl before invoking the service, don't you? (check the logs to see what actually is asked with the GET call)
In this case you could store the wsdl locally (which btw is a general suggestion for clients to reduce network traffic).