Supporting Web Service Security Policy [SWS-532]

[gregturn]

Aswartha Rupa opened SWS-532 and commented

Currently spring web services doesn't support processing of the web security policy ref: http://specs.xmlsoap.org/ws/2005/07/securitypolicy/ws-securitypolicy.pdf

---

Affects: 1.5.8

11 votes, 9 watchers

[gregturn]

Aswartha Rupa commented

Web Services Policy Recent release - http://specs.xmlsoap.org/ws/2004/09/policy/ws-policy.pdf

[gregturn]

Aswartha Rupa commented

Updated link
http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/ws-securitypolicy-1.2-spec-os.pdf

[gregturn]

Bijal commented

Any idea when this feature will be released?

[gregturn]

Bijal commented

Besides writing our own WSDL, is there any other temporary solution? Is there a sample code available that shows how to add the policy programmatically through one of the providers?

[gregturn]

Ralf Eichinger commented

Apache CXF (compatible Apache license...) implements WS-SecurityPolicy: see http://cxf.apache.org/docs/ws-securitypolicy.html
Is there a workaround (someone made already and can contribute) to use the CXF implementation and Spring configuration from within an own Interceptor (which adds then the policy to the WSDL)?

[gregturn]

Nico de Wet commented

Using the dynamically created wsdl is extremely convenient, and so being able to include WS-Policy in some form would be useful, in fact essential. Perhaps one could annotate Endpoints with policy references. Feedback and thoughts in this regard would be appreciated.