How to authenticate a standalone client for a secure EJB3 WebService?

abhi0123 Apr 9, 2012 11:53 PM

I have a WebService implemented as EJB3 Endpoint. Some methods in the service are secured using @RolesAllowed. How can I authenticate a standalone client against the service and invoke the secure methods successfully? I've found a solution for a pure EJB here but don't think that the same would work for the WebService invocation.

1. Re: How to authenticate a standalone client for a secure EJB3 WebService?

abhi0123 Apr 9, 2012 11:55 PM (in response to abhi0123)

Question and title changed.
Actions
2. Re: How to authenticate a standalone client for a secure EJB3 WebService?

ropalka Apr 10, 2012 5:44 AM (in response to abhi0123)

See this commit: https://github.com/jbossas/jboss-as/commit/bd7efeddadf8ac45b0937740381809f793dd9dbd
It introduces security authentication tests for both POJO & EJB3 based WS endpoints.
Actions
3. Re: How to authenticate a standalone client for a secure EJB3 WebService?

abhi0123 Apr 12, 2012 12:21 AM (in response to ropalka)

Looks like I uncovered a defect. See this post in the Web Services forum.
Actions

Go to original post