How to create a proxy for REST service using digest authentication?

xyintao.gmail.com's picture

Hello

Can you point me to an example on how I can proxy a call to a digest authentication secured service? The service is REST

samba's picture

Hello, Just use this link is

Hello,
Just use this link is helpful but my proxy is not a REST proxy. However you just have to create a sequence
that call this class before sending the request to the end point (Client --> ESB --> LDAP verification or store --> forward if authentication or 401 reponse else)):
http://wso2.org/library/knowledge-base/converting-http-basic-authentication-ws-security-username-token

xyintao.gmail.com's picture

Thanks, but that link only

Thanks, but that link only talks about basic authentication. What we are looking for is the more secure challenge/response digest authentication

indika's picture

HI It is better if you could

HI

It is better if you could ask this from 'Identity Server Forum'. Just asks that 'how to use the axis2 client to talk to a digest authentication secured service'. if it needs only a set of properties, HTTP headers, etc., they you can do that by using existing mediators(header or property mediators). Otherwise, you may need to write a custom mediator.

Thanks

Indika

samba's picture

May be you need to add

May be you need to add ws-security using username/password token on soap header but it depends on what you need to secure : Transport ? soap payload just authorization or access control.
In my use case I use basic authentication but the next step is to foward a token like saml in secure transport lecel https.
So what do you really need ?

Hot Topic
Hot
Topic

Google Gadgets are a nice way to develop user interfaces for distributed services. The fact that they can be hosted anywhere over a network, not necessarily in the very portal server they eventually run in makes them re-usable and allows users to quickly...

Latest Webinar
In this webinar we'll share the range of concerns we've heard from the industry, and survey some of the new and sometimes subtle types of lock-in associated with cloud technologies.
Wednesday, 8 September, 10.00 AM (PDT)