Adding Authentication to Web Service using JDeveloper

Question

Hi Gurus,
I am new to weblogic 10.3 and Jdeveloper 11.1.3. Using Jdeveloper, I imported few packages from database , right clicked and published them as a webservice on a weblogic server. I did not select any WLS policies. The web service is working fine. Now i want to add some basic authorization (username/password) to this webservice.
Which policy should i use ?
Where should i configure this username\password so that all the webservices uses same user for authenctication ? Do i have to create this user on the weblogic server? If yes then how.
Thanks in Advance.
Jack

Answer 1

Hi,
If you are using JAXWS based WebService then you can give it a try:
http://weblogic-wonders.com/weblogic/2010/01/09/username-token-in-jaxws-webservice/
This sample demonstrates ..How we can use UserName/Password Authentication in JAXWS Service. This will be very Easy for you to develop using JDeveloper...U need to Just the add Following XML file as a Policy inside your Application.
Using the following Policy:
<font color=maroon>
<?xml version=”1.0″?>
<wsp:Policy
xmlns:wsp=”http://schemas.xmlsoap.org/ws/2004/09/policy”
xmlns:sp=”http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512″>
<sp:SupportingTokens>
<wsp:Policy>
<sp:UsernameToken
sp:IncludeToken=”http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200512/IncludeToken/AlwaysToRecipient”>
<wsp:Policy>
<sp:WssUsernameToken10/>
</wsp:Policy>
</sp:UsernameToken>
</wsp:Policy>
</sp:SupportingTokens>
</wsp:Policy>
</font>
Thanks
Jay SenSharma