WS-Security implementation

This requires policy support which is still WIP. Soon we will add this to the trunk with the sample code updated.

Hi Kris, You can enable WS-Security for a Spring Web service if you build the WSF-spring binaries from the latest codebase. Follow the steps given below. 1) Build the wsf-spring binaries from the latest codebase. 2) Add rampart mar / jar files to the lib folder of the servlet container. 3) Specify the security policy for the service in applicationContext.xml <bean id="sampleservice" class="org.wso2.spring.ws.SpringWebService">           ....     <property name="policies">     <list>               <value>                 <!-- service security policy as the String --> &lt;wsp:Policy wsu:Id="SgnEncrAnonymous" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"&gt;                &lt;wsp:ExactlyOne&gt;                   &lt;wsp:All&gt;                        ....                 </value>         </list>    </property>    .... </bean> 4) Engage rampart module by adding the following entry in applicationContext.xml <bean id="sampleservice" .. >     ....     <property name="modules">         <list>             <value>addressing</value>         </list>     </property>     .... </bean> HTH Sanka

Hi, I want to be able to include the passwordCallBack handler using spring di instead of the policy.xml file, is that posible, I need this because my passwordCallbackHandler uses another dependencies that are managed by Spring. Here is an example, the " does it really work" is an attempt to do it. <bean id="services" class="org.wso2.spring.ws.WebServices">         <property name="services">             <list>                 <bean id="emrService" class="org.wso2.spring.ws.SpringWebService">                     <property name="serviceBean" ref="emrws"></property>                     <property name="serviceName" value="emrWs"></property>                     <property name="serviceDescription"                         value="Provee de metodos para realizar busquedas."></property>                     <property name="modules">                         <list>                             <value>rampart</value>                         </list>                     </property>                     <property name="policyFiles">                         <list>                             <value>policy.xml</value>                         </list>                     </property> <!-- does it really work   http://wso2.org/forum/thread/3486#comment-10564  -->                     <property name="parameters">                         <map>                             <entry key="InflowSecurity" value-ref="inflowConfiguration" /> <!--                            <entry key="OutflowSecurity" value-ref="outflowConfiguration" />-->                         </map>                     </property> <!-- /does it really work -->                 </bean>             </list>         </property>     </bean>